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Abstract 



A short introduction to quantum error correction is given, and it is shown that 
zero-dimensional quantum codes can be represented as self-dual additive codes 
over GF(4) and also as graphs. We show that graphs representing several such 
codes with high minimum distance can be described as nested regular graphs 
having minimum regular vèrtex degree and containing long cycles. Two graphs 
correspond to equivalent quantum codes if they are related by a sequence of 
local complementations. We use this operation to generate orbits of graphs, 
and thus classify all inequivalcnt self-dual additive codes over GF(4) of lcngth 
up to 12, where previously only all codes of lcngth up to 9 were known. Wc 
show that these codes can be interpreted as quadratic Boolean functions, and 
we define non-quadratic quantum codes, corresponding to Boolean functions of 
highcr degree. We look at various cryptographic properties of Boolean func- 
tions, in particular the propagation criteria. The new aperiodic propagation 
criterion (APC) and the APC distance are then defined. We show that the dis- 
tance of a zero-dimensional quantum code is equal to the APC distance of the 
corresponding Boolean function. Orbits of Boolean functions with respect to 
the {/, H, N} n transform set are generated. We also study the peak-to-average 
power ratio with respect to the {/, H, N} n transform set (PARjhn), and prové 
that PARjhn of a quadratic Boolean function is related to the size of the max- 
imum independent set over the corresponding orbit of graphs. A construction 
technique for non-quadratic Boolean functions with low PARjhn is proposed. 
It is finally shown that both PARjhn and APC distance can be interpreted as 
partial entanglement measures. 
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Chapter J 

Introduction 



1.1 Motivation 

In this thesis we will look at a set of objects that can, under suitable interpre- 
tations, be represented as 

• zero-dimensional quantum codes, 

• quantum states, 

• self-dual additive codes over GF(4), 

• isotropic systems, 

• simple undirected graphs, 

• and quadratic Boolean functions. 

Each interpretation reveals different properties about the underlying objects 
and suggests different generalisations. 

There has been a lot of interest in quantum computing since the discovery 
of Shor's algorithm, which can factor an integer in polynomial time. Practical 
quantum computers have not yet been built, but it is clear that quantum er- 
ror correction must be a crucial part of any implcmcntation. Zero-dimensional 
quantum codes only represent single quantum states, but are still of interest to 
physicists since codes of high distance represent highly entangled states which 
could be used for testing the decoherence properties of a quantum computer. 
It has also been shown that a special type of quantum computer can be implc- 
mented by performing measurements on a particular class of entangled states. 

Zero-dimensional quantum stabilizer codes can be represented as self-dual 
additive codes over GF(4). These codes are of interest to coding theorists, and 
several construction techniques and classifications have been published. A code 
of this type can be represented by an isotropic system, a combinatorical object 
that has been the subject of much research. A self-dual additive code over 
GF(4) can also be represented by a simple undirected graph. This allows us 
to use concepts and algorithms from graph theory to characterise the graphs 
corresponding to strong codes. A generalisation to hypergraphs is also suggested 
by this interpretation. 

The same objects are also equivalent to quadratic Boolean functions, and the 
generalisation to Boolean functions of higher degree is natural. Boolean func- 
tions are of great interest to cryptographers, since they can be used, for instance, 
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to analyse and construct S-boxes in block ciphers and nonlinear combiners in 
stream ciphers. Many criteria for the cryptographic strength of Boolean func- 
tions exist, and it turns out that zero-dimensional quantum codes with high 
minimum distance correspond to Boolean functions that satisfy such a crite- 
rion. This suggests that highly entangled quantum states may correspond to 
cryptographically strong Boolean functions. Conversely, various properties de- 
rived from transformations of Boolean functions can be interpreted as partial 
entanglement measures of the corresponding quantum states. 

1.2 Overview 

|The second chapter| of this thesis gives a very short introduction to the the- 
ory of quantum computing and quantum error correction. The properties of 
superposition and entanglement are explained, and we we show how computcr 
algorithms can be implemented by using transformations and measurements of 
quantum states. Some of the important discoveries in the theory of quantum 
computing are also mentioned. A few bàsic concepts from classical coding the- 
ory are presented before we see that error correction is also possible in quantum 
computers. Although an infinite number of different errors can affect a quantum 
state, we show that quantum codes only need to consider a small set of basis 
errors. Quantum codes can be expressed in the stabilizer formalism, but have 
an equivalent representation as additive codes over GF(4). We finally introduce 
the type of codes that will be studied in this thesis, namely quantum codes of 
dimension zero, called self-dual quantum codes, which represent single quantum 
states. Some bounds on the distance of such codes are presented. 

|Chapter~3] starts with an introduction to graph theory and defines the nota- 
tion that we will use. It is then shown that the computer program nauty can 
detect graph isomorphisms. By using a simple mapping from hypergraphs to 
ordinary graphs, nauty can also detect isomorphism of hypergraphs. A special 
type of self-dual quantum codes are the graph codes which can be represented by 
undirected graphs. It can be shown that any self-dual quantum code is equiv- 
alent to a graph code, and therefore that there is a one-to-one correspondence 
between the set of simple undirected graphs and the set of self-dual quantum 
codes. A method for converting any self-dual quantum code into a graph code 
is described. By exploiting the special form of the generator matrix of a graph 
code, the distance and partial weight distribution of the code can be found by 
cfficicnt algorithms. The well-known Quadratic residue construction can be 
used to find self-dual quantum codes of high distance. These codes can be 
represented by a class of strongly regular graphs, called Paley graphs. A small 
modification of such a code produces a bordered quadratic residue code. We 
construct quadratic residue codes, and their bordered versions, for all possible 
lengths up to 30. For length 18, the quadratic residue construction does not 
give an optimal code, but there is a modified technique that does. 

In |chapter"4| we look at the graphs corresponding to two well-known self- 
dual quantum codes, the Hexacode and the Dodecacode. Both codes can be 
represented by graphs with a special nested structure, which we define as nested 
clique graphs. We show that there is a lower bound on the vèrtex degree in 
graphs representing self-dual quantum codes, and that graphs with minimum 
regular vèrtex degree satisfy this bound with equality. We perform an exhaustive 
search of all graph codes with circulant generator matrices, for lengths up to 
30. Many codes with optimal distance and minimum regular vèrtex degree are 
identified, and their nested structures are described. The more general nested 
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regular graphs are also defined. We finally discuss the observation that nested 
regular graphs corresponding to codes of high distance also contain long cycles. 

|Chapter"1)| deals with the equivalence of self-dual quantum codes. We first 
see that the quantum states represented by equivalent self-dual quantum codes 
are related by a simple transformation. This transformation corresponds to a 
simple operation, known as local complementation, on the graph representations 
of the codes. In addition to local complcmentations, graph isomorphism must 
be considered, since isomorphic graphs also correspond to equivalent quantum 
codes. We give three different algorithms for generating LC orbits, the equiva- 
lence classes of self-dual quantum codes with respect to local complementation 
and graph isomorphism. By implementing these algorithms, using various op- 
timisation techniques and a cluster computer, we are able to generate all LC 
orbits of codes of length up to 12. This gives a complete classification of all 
self-dual additive codes over GF(4) of length up to 12, where previously only all 
codes of length up to 9 had been classified. A database containing a represen- 
tative of each LC orbit is also available. We next look at the LC orbits of some 
strong codes, and search for regular graph structures. The non-existence of any 
regular graph representation is established for some codes. Finally, we prové 
that a single LC operation on the graph corresponding to a bordered quadratic 
residue code produces a regular graph. 

Boolean junctions are introduced in |chapter"6] The algebraic normal form 
transformation and the Walsh-Hadamard transformation are dehned, and an 
efhcient algorithm for these and other transformations is described. After defin- 
ing the periòdic autocorrelation, we see how Boolean functions are used in cryp- 
tography. The properties of correlation immunity, resilience, and perfect non- 
linearity are of particular interest in this context. We also study the more 
general propagation criteria, and define the new aperiodic propagation criterion 
(APC), which is related to the aperiodic autocorrelation. We also define the 
APC distance of a Boolean function. It is explained that Boolean functions can 
be interpreted as quantum states, and that quadratic Boolean functions corre- 
spond to the self-dual quantum codes studied in the previous chapters. Boolean 
functions of higher degree can be represented by hypergraphs and correspond 
to a new type of zero-dimensional quantum codes, the non-quadratic quantum 
codes. We see how errors on a quantum state can be expressed as operations 
on the corresponding Boolean function, and show that the distance of a zero- 
dimensional quantum code is equal to the APC distance of the corresponding 
Boolean function. The transform set {I, H, N} n is introduced, and it is shown 
that the LC orbits of equivalent self-dual quantum codes can be generated by 
this transform set. Finally, we define two types of orbits of Boolean functions 
and enumerate all inequivalent functions of up to 5 variables, and all functions 
of 6 variables with degree up to 3. We also give examples of non-quadratic 
quantum codes with high APC distance. 

In |chaptcr 7[ we study another property of Boolean functions and their cor- 
responding graphs and quantum states, namely the peak-to-average power ratio 
with respect to the {/, H, N} n transform (PARjhn). We calculate the PARihn 
of all quadratic Boolean functions with up to 12 variables, and we prové that 
the PARjhn of a quadratic Boolean function equals 2 A , where A is the size of 
the largest independent set in the corresponding LC orbit of graphs. We also 
define A„, the minimum value of A over all LC orbits of graphs on n vertices. 
The vàlues of A„ for n up to 14 are given, and bounds on A n are provided for 
n up to 21. A construction technique for non-quadratic Boolean functions with 
low PARjhn is proposed, using good quadratic functions as building blocks. 
We also look at PAR with respect to other transform sets, in particular PARjh 
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and PARu, and show that PAR^ = PAR/# for quadratic Boolean functions 
corresponding to bipartite graphs. We show that APC distance and PARjhn 
teli something about the degree of entanglement in a quantum state and briefly 
mention other measures derived from the {/, H, N} n spectrum. We also show 
that PARihn is related to an entanglement measure known as the Schmidt 
measure. 

We give some final conclusions and present some open problems and ideas 
for future research in |chapter 8| 

Whilc |chapter 2| and |chapter 3| of this thesis mostly contain previously known 
results, the later chapters contain many new contributions, and most of these 
are listed here. 

• An exhaustive search of all circulant graph codes of length up to 30 is 
performed. 

• It is shown that many self-dual quantum codes of high distance can be 
represented by nested clique graphs or nested regular graphs, and that 
these graphs also contain long cycles. 

• Minimum regular vèrtex degree is defined, and many graphs with this 
property are identified, corresponding to self-dual quantum codes of high 
distance. 

• All self-dual additive codes over GF(4) of length up to 12 are classified 
and made available in a database 01 • Previously only all codes of length 
up to 9 were known. The new numbers of inequi valent codes have been 
added to The On-Line Encyclopedia of Integer Sequences 56] . 

• It is shown that there are no regular graphs corresponding to [[11,0,5]] or 
[[18,0,8]] codes, but that bordered quadratic residue codes can be trans- 
formed into regular graphs by a simple graph operation. 

• The aperiodic propagation criterion and the APC distance of a Boolean 
function are defined. It is shown that Boolean functions with APC dis- 
tance d can be interpreted as zero-dimensional quantum codes with dis- 
tance d. 

• We define non- quadratic quantum codes, corresponding to hypergraphs 
and Boolean functions of degree higher than two. Several non-quadratic 
quantum codes with high distance are found. 

• We define two types of orbits of Boolean functions and enumerate all 
inequi valent functions of up to 5 variables, and all functions of 6 variables 
with degree up to 3. 

• The peak-to-average power ratio with respect to the {/, H, N} n transform 
(PAR/HA') is studied, and it is shown that the PAKihn of a quadratic 
Boolean function equals 2 A , where A is the size of the largest independent 
set in the corresponding LC orbit of graphs. 

• We define A n , the minimum value of A over all LC orbits of graphs on 
n vertices, and give the vàlues of A ra for n up to 14. Bounds on A„ are 
provided for n up to 21. 

• A construction technique for non-quadratic Boolean functions with low 
VAVk,ihn is proposed. 
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Chapter L·J 

Quantum Computing and Quantum Codes 



2.1 Quantum Computing 
2.1.1 Introduction 

We will only give a brief presentation of quantum computing. For more de- 
tails, we refer to some of the many good introductions to the tòpic HEUEES- 
Quantum mechanics is a physical theory that describes the behaviour of ele- 
mentary partides, such as àtoms or photons. The laws of quantum mechanics 
predicts effects which are very different from the physical reality that we or- 
dinarily observe. Of particular interest are the properties of superposition and 
entanglement. 



2.1.2 Quantum Superposition 

A simple experiment demonstrating quantum effects uses the polarisation of 
light. The light from an ordinary light source consists of photons with a random 
polarisation. If we put filter A, which has horizontal (0°) polarisation, between 
the light source and a screen, as shown in |Figurc 2.1.2| the intensity of the light 
reflectcd from the screen will be half of the original, and all photons that pass 
the filter will now have horizontal polarisation. This can be verified by adding 
filter B, which has vertical (90°) polarisation, between filter A and the screen. 
This time, no light reaches the screen at all, as seen in |Figure 2.1.2| A most 
confusing fact is that after adding another filter between A and B, some of 
the photons do reach the screen. The filter C, with 45° polarisation, is added 
between filters A and B, and as shown in |Figurc 2.1.2| we will observe light 
with | of the original intensity reflected from the screen. 

What happens is that the randomly polarised photons are "measured" whcn 
they hit filter A. Half of them get a horizontal polarisation and pass through, 
and the other half get a vertical polarisation and are stopped. If the horizontally 
polarised photons then hit filter B, they will all be stopped. But if they hit 
filter C they will again be "measured", but now with respect to another basis. 
Half of them will receive a 45° polarisation and pass through. The other half get 
an orthogonal (135°) polarisation and are stopped. One fourth of the original 
photons will pass through both filter A and C. If these photons, which now 
have a 45° polarisation, then hit filter B, they will again be "measured", and 
half of them, | of the initial amount, will pass through. 

The results observed in this experiment are due the property of quantum 
superposition. An object which is in a superposition can be viewed as having 
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Figure 2.1: Demonstrating Quantum Effects With Polarisation Filters 



two or more vàlues for an observable quantity at the same time. Once the 
quantity is measured, the superposition will randomly col·lapse into one of the 
vàlues, according to probabilitics associated with each possible outeome. A 
photon could, for instance, have horizontal polarisation with probability a and 
at the same time vertical polarisation with probability b. Whcn this photon is 
"measured" by a horizontal polarisation filter, it will with probability a receive 
horizontal polarisation and pass through the filter, and with probability b receive 
vertical polarisation and be stopped by the filter. 



2.1.3 Bra/Ket Notation 

The òra/fceí-notation invented by Dirac is much used in quantum mechanics. 
((j>\ is a bra (the left side of a bracket), and \<p) is a ket (the right side of a 
bracket). Kets are used to describe states. The state of horizontal polarisation 
could be described by |— »), and vertical polarisation by |T). A photon which is 
in a superposition of these states could be described by a |— >) + (3 where a 
and P are complex numbers. \a\ 2 is then the probability of the state collapsing 
to |— >) upon measurement, and \(3\ 2 is the probability of measuring ||). We 
must have that \a\ 2 + \/3\ 2 = 1. 

Measurement of a quantum state must be done with respect to a specific basis. 
In the experiment with photons we used the bases {|— >) , |T}} and {\S) , |\)}- 
Since |T) = ^ \/) + ± |\> and |->> = ^ \/) - ^ |\), vcrtically and hor- 

izontally polarised photons will have probability \ of getting through a filter 
with 45° polarisation, which is what we observed in the experiment. The nega- 
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tive sign in the expression |— ») = -i= \/) — -±= |\) denotes phase. Information 
about the phase is lost once the superposition collapses, and in this example 
it can be ignored. With the basis states of a measurement basis we associate 
orthonormal basis vectors. For example, |— ►) = ( Q ) and |j) = (°). The state 
a\— >) + /3||) can then be described by the vector (T). Each ket has a cor- 

responding bra, (0| = \4>)\ where the operator f first conjugates and then 
transposes a vector, e.g., (^) = (a, (3). Thc inner product, (<p\ \tp) (also written 
(4>\ip)), is a sealar, and is equal to zero if the vectors associated with and 
arc orthogonal. The outer product, \<j>) (ip\, is a matrix which can be used 
to express transformations on quantum states. 



2.1.4 Quantum Bits 

A quantum bit, or qubit, has two possible states, labelled |0) and |I). All 
measurements will be done with respect to the basis {|0) , |I)}. A qubit can be 
represented by any two-level quantum system. Using vertical and horizontal 
polarisation of a photon, we could assign |0) = |— ►) and |1) = ||), or |0) = \/) 
and |1) = |\). Other possible implementations are thc up/down spin of an 
electron or two energy levels of an atom. 

Unlike a classical bit, a qubit can be in a superposition of |0) and |1). Thc 
state of a general qubit can be denoted a |0)+/3 |1), with \a\ 2 being the probabil- 
ity of getting the result |0) when measuring the qubit, and \(3\ 2 the probability 
of getting a 1 1} . Several qubits can be combined to form a quantum register. 
The state of a two-qubit register can be denoted a |00) + (3 |01) + 7 |10) + 6 |11), 
or equivalently by the vector (a, (3, 7, S) T , where |a| 2 is the probability of mea- 
suring both qubits as zero, and so on. It is also possible to measure only one 
of the two qubits. If we measure the first qubit, the probability of getting |0) is 
M 2 + l/?| 2 ) an d the probability of getting |1) is I7I 2 + \S\ 2 . Upon measurement, 
the state will collapse, so later measurements of the same qubit will always 
yield the same value as the first timc. If the first qubit is measured as |0), the 
remaining state is 

- a |00) + ; = 101) . 

If the first qubit is measured as |1), the remaining state is 

- 7 |10) + - |11) . 



If a, /?, 7 and S are all equal to 5, the first qubit we measure will be |0) 
or |1) with probability \, and the second qubit we measure will also be |0) or 
|1) with probability \. But this is not the general case. Consider the state 
-i= 1 00) + -j= |11). If we measure the first qubit to be |0), the state will collapse 
to 1 00) , and if we measure the first qubit to be |1), the state will collapse 
to |11). We see that the value of the second qubit is determined when we 
measure the first, and that the two qubits will always have the same value. We 
have observed another fundamental property of quantum mechanics, namely 
quantum entanglement. 
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2.1 .5 The Tensor Product 



Deflnition 2.1. The tensor product (also known as the Kronecker product) of 
thc n x m matrix A, and thc k x l matrix B, gives the nk x ml matrix 



A(g>B 



( ABo.o 
ABi, 



AB ,i 
ABn 



\AB k . 



1,0 



AB k _ 



í.i 



ABo,i_i \ 



ABk-i,i-iJ 



(2.1) 



where Bjj is the value in row i and column j of B. 

The tensor product of u, a column vector of length n, and v, a column vector 
of length k, is a column vector of length nfc, 



u ; 



(2.2) 



When we write |01), it is in fact shorthand notation for |0) £g> |1), where we take 
the tensor product of the basis vectors associated with the quantum states, 



|01) = |0>®|1> 



(i 
















1 






■v 







1 






W 



2.1.6 Quantum Entanglement 

An entangled quantum state is a multi-qubit state where the vàlues of the qubits 
are not independent. There is no classical counterpart to this situation. Qubits 
that are not entangled can be separated and described independently, using the 
tensor product. For example, |(|00) + |01) + 1 10) + 1 11) ) = ^(|0) + |1)) <g> 

^75 (|0) + |1)). Measuring one of these qubits will not affect thc outeome of thc 
other. The state ^ |00) + |11), however, can not be factorised in this way, 
and we have already seen that this is an entangled state. 

Classical computers only use the tensor-factorisable space, and a register of 
n classical bits will at any time be in one of 2™ possible states. A register of n 
qubits in a quantum computer, however, has a state space defined by 2™ basis 
vectors, which is an exponentially larger space than in the classical case. The 
state space also grows exponentially with the number of qubits. It is these 
properties that give quantum computers their advantage. 

A fascinating fact is that one can gencrate two maximally entangled qubits, 
^|(|00) + |11)), (called an EPR pair), and then separate thc two partides by 
an arbitrary distance. When we then mcasure one of the qubits, the combincd 
state changes instantaneously, and a later measurement of the second qubit will 
always give the same value as the that of the first qubit. This cffcct of quantum 
mechanics was thought to be a paradox, but it has been proved that it is not 
possible to use entangled partides to communicate faster than the speed of 
light, so there is no violation of the fundamental laws of physics. 

In addition to being entangled with each other, it is possible that qubits in a 
quantum register could be entangled with the environment, i.e., any partides 
outside the register. Quantum states that are entangled with the environment 
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are called mixed states, and can be described by density operators. We will, 
however, only consider pure states, i.e., quantum states that are not entangled 
with the environment. 

2.1.7 Quantum Transformations 

Definition 2.2. A matrix U is a unitary matrix if UU^ = I, where f mcans 
conjugate transpose and / is the identity matrix. 

Definition 2.3. A matrix that can be written as a tensor product of 2 x 2 
unitary matrices is a local unitary matrix. 

In addition to measurements, we can perform transformations on quantum 
states. A quantum transformation must be reversible, and it can be shown 
that it must therefore be defined by a unitary transformation matrix. Transfor- 
mations given by local unitary matrices operate independently on each qubit, 
and therefore do not change the overall entanglcment properties of the quan- 
tum state. We can think of local unitary transformations as "rotations" which 
enables us to look at the same quantum state "from another angle", without 
changing its properties. In the bra/ket notation, transformations can be de- 
scribed by outer products. For instance, 

w<ii + id<pi-(;)(m) + Q(m)-(! s) + (s ;)-(; ;) M 

is the transformation that maps |0) to |1) and |1) to |0), 

(|0)(l| + |l)(0|)(a|0)+/3|l))=(5 J) (^) = (f) =«|1>+/?|0>. (2.4) 

This is called the bit-flip or "not" transformation. It is easy to verify that it is 
unitary and self-inverse. 

A local unitary transformation on an n-qubit quantum state is given by a 
tensor product of n 2 x 2 unitary matrices, 

U = U <X> Ux <X> ••• <X> Un-i- (2.5) 

To express that the transform Uq should be applied to qubit number i, we can 
write Uq \ The transformation that applics Uq to the ith qubit and U\ to all 
other qubits is thcn 

U = U®Ç$UP. (2.6) 

Note the factors must be placed in the correct order before this tensor multi- 
plication can be carried out. 

Definition 2.4. We define the Pauli matrices, 

a * = (°i o)' ^ = (o CT »=(° o*)' /= (o ?)■ 

The Pauli matrices is a useful set of quantum transformations. a x represents 
a bit-flip, a z is a phase-flip, and a y is a combination of both, since a y = ia x a z . 
The factor i in the definition of a y makes some manipulations easier, but in 
most cases the overall phase factor of a quantum state can be ignored. We also 
include the identity matrix, /, which makes no change to the qubit it is applied 
to. We will later see that Pauli matrices can be used to represent errors on 
quantum states. 
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Definition 2.5. The Hadamard transformation is defined by the matrix 

Observe that by applying iï, we transform the state |0) into the superposition 
^(|0) + |1)), while the state |1) is transformed into 4|(|0) - |1)). The Walsh- 
Hadamard transformation applies H to every qubit of a state. If we apply the 
Walsh-Hadamard transformation to an rt-qubit all-zero state, |00 - - • 0) , we get 
a superposition of all the 2™ basis states, each with the same probability. 

We have already seen that measurements of quantum states destroy much of 
the information the states contain. It is also easy to show that it is impossible 
to make perfect copies of a quantum state, since there is no unitary, and thus 
non-destructive, transformation which performs this copying. 

Theorem 2.6 (Dieks, and Wootters and Zurek). A quantum state can not 
be cloned, i.e., there is no operation that takes \<j>) to \4>4>) , where \<f>) is any 
quantum state. 

Proof. Assume that such an operation exists, and let \<p) and \ip) be two distinct 
quantum states. Then the cloning operation gives 



(2.7) 

M -> W) , (2-8) 

\<t>) + \ii>) -> (i^) + iv)) ® m + m = \m>) + \h>) + \h>) + \u) ■ (2-9) 

But, since all quantum operations must be linear, it follows from 12.7(1 and ((2.8(1 
that 

\4>) + IV) -> l#) + \W>) , (2-10) 

which is a contradiction of 1(2.9(1 . □ 



2.1.8 Quantum Computers 

The idea of using quantum mechanical effects to perform computations was 
firat introduced by Feynman in the 1980s, when he discovered that classical 
computers could not simulate all aspects of quantum physics efhciently. In 
1985, Deutsch showed that it is possible to implcment any function which is 
computable by a classical computer using registers of entangled qubits and 
arrays of quantum gates, each performing a unitary quantum transformation. 

The advantage of quantum computers, compared to classical computers, is 
the property of quantum parallelism. We have seen that an n-qubit quantum 
register can be in a superposition of all its 2™ basis states. A function of n 
variables, implemented by an array of quantum gates, can therefore be applied 
to all the basis states simultaneously, and the result will be a superposition 
of the function's 2" possible outputs. If we try to measure the result directly, 
the superposition will collapse, and we will only observe one random value of 
the function, which is not very uscful. The advantage of quantum computers 
comes from the discovery that appropriate transformations on a superposition 
of states enables us to observe a common property of all the states. This makes 
it possible, for instance, to find the period of a function by applying the function 
once to a superposition of all possible input vàlues. Another way to make use 
of quantum parallelism is to use transformations that amplify the probability 
of desired results. 
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Shor's algorithm, discovered in 1994, can factor an integer in polynomial 
time. For classical computers, all known algorithms require a running time 
that grows exponentially with the number of bits in the integer to be factored. 
Interest in quantum computing increased with the discovery of Shor's algorithm, 
since the security of many popular public-key cryptography schemes is based 
on the assumed infeasibility of factoring large integers. The factoring problem 
can be reduced to the problem of finding the period of a function. In Shor's 
algorithm, this is accomplished by applying the quantum Fourier transform to 
a superposition of all vàlues of the function. 

Grover's algorithm, discovered in 1996, can be used to search for an element 
in an unsorted list in running time of order 0(^/n). Classical computers can 
not do better than 0(n). This is another example of the advantages of quan- 
tum computing, although not as impressive as the exponential gain of Shor's 
algorithm. Grover's algorithm finds a value for which a given statement is true. 
This is done by evaluating the statement for a superposition of all possible vàl- 
ues, and then repeatedly using a transformation that increases the probability 
of the state that satisfies the statement. When we finally read the value of the 
quantum register, we will with very high probability observe the desired state. 

Many diffcrcnt tcchniqucs for the construction of quantum computers are 
being researched, but the best implementations so far only operate on 2 or 3 
qubits. Although there are many interesting theoretical results about quantum 
computers, a practical and scalable implementation is not possible with the 
technology available today. 

Quantum computing should not be confused with the concept of quantum 
key distribution, although both exploit the property of quantum superposition. 
In quantum key distribution, a sequence of qubits, typically represented by 
the polarisation of photons, is sent over an insecure quantum channel. Only 
the sender knows which basis each qubit is encoded with. It is impossible 
for an eavesdroppcr to clone the qubits, and if he tries to measure one using 
the wrong basis, its state will change. Eavesdropping can later be detected, 
when the choices of encoding bases are made públic. Quantum key distribution 
requires much simpler technology than quantum computing. Working systems 
for quantum key distribution, using up to 150 kilomctres of optical cables, have 
been successfully implemented. 

2.2 Classical Error Correction 

We here give a short introduction to some bàsic concepts of error correcting 
codes that will be useful when we later discuss quantum error correction. 

Definition 2.7. Lot A be an alphabet, and let A n be the set of all n-tuples of 
elements from A. A code, C, over A of lcngth n is a subset of A n , C C A n . 

A code maps a vector v of k symbols to a vector u of n symbols, called a 
codeword, where n > k. Any alphabet of symbols may be chosen, but the 
binary alphabet {0, 1}, where the symbols are called bits, is often used. The 
n — k extra symbols added by the encoding process provides redundaney. If a 
codeword is changed by a transmission error, this redundaney may enable us to 
determine the original codeword, or at lcast to detect that an error oceurred. 
An error in this context is an operation that change one or more symbols of a 
codeword into other symbols. If the binary alphabet is used, an error flips the 
value of one or more bits, ^ 1 or 1 0. 
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Definition 2.8. The code C can be defined by a k x n matrix G, called a 
generator matrix, where C = {vG \ v € A k }. 

Encoding is a simple process once we know G, the generator matrix of a code 
C, since the codeword corresponding to v is u = vG. The rows of G are called 
the basis codewords of C, since any codeword is a linear combination of these 
rows. 

Definition 2.9. Lct C be a code over the alphabet A, where A — GF(g) is a 
finite field, and let G be the generator matrix of C. If all linear combinations of 
the rows of G are codewords in C, thcn C is a vector space and a fc-dimensional 
subspace of GF(ç)™. A code that fulfils these criteria is called a linear code. 

Definition 2.10. Let C be a code over a finite field with generator matrix G. 
If any sum of the rows of G, i.e., any GF(2)-linear combination, is a codeword 
in C, and all codewords in C are GF(2)-lincar combinations of the rows of G, 
then C is an additive code. If the binary alphabet is used, all additive codes are 
linear codes, but this is not truc for the general case. 

Definition 2.11. The code C can also be defined by an (n — k) x n matrix H, 
called the parity check matrix of C. C = {u e A n \ uH T = 0}, where is the 
all-zero vector. 

Given the parity check matrix H of a code C, it is easy to check whether a 
vector u is codeword by checking if uH T — 0. If we receive a vector that does 
not satisfy this criteria, we know that an error has oceurred. If the codeword u 
is transmitted and u' is the received vector, then we can write u' = u + e, where 
e is the transmission error. It is easy to verify that u' H T = uH T + eH T = 
+ eH T = eH T . We see that the value of u'H T only depends on the error e, 
and we therefore call this value the syndrome of e. Given a set of errors with 
distinct syndromes, we can determine which of the errors has oceurred by using 
the syndrome calculated from the received vector. 

Definition 2.12. The Hamming weight of a vector a of length n, denoted 
wh((i), is the number of non-zero coordinates of a, i.e., w# (a) = \{ai ^ | i € 
Z„}|, where is the ith coordinate of a. 

Definition 2.13. The Hamming distance between two vectors a and b, both 
of length n, denoted d(a, b), is the number of coordinates where the two vectors 
have diffcrcnt vàlues, i.e., d(a, b) = \{ai ^bi\i e Z„}|. 

Definition 2.14. The minimum distance of a code C, denoted d(C), is the 
smallest number of symbol errors needed to change one codeword into another, 
i.e., d(C) — min{cí(a, b) \ a, b e C, a ^ b}. 

Proposition 2.15. A code can detect s errors if d(C) > s + 1. A code can 
correct t errors if d(C) > 2t + 1. 

Definition 2.16. A code of length n containing M codewords and having 
minimum distance d is called an (n, M, d) code. For linear codes, the notation 
[n, k, d] may also be used, where k is the dimension of the code. The number 
of codewords in a linear code over GF(ç) is thcn q k . 

Proposition 2.17. The distance of a linear code C can easily be found as 
d(C) = min{wH(u) \ u G C\{0}}, i.e., the weight of the minimum weight 
non-zero codeword in C. 
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Definition 2.18. Every code C over GF(g) has a dual code, C 1 - = {u e GF(q) \ 
u ■ c = 0, Vc e C}. If C Ç C , then C is a self-orthogonal code. If C = C , thcn 
C is a self-dual code. 

If C has generator matrix G and parity check matrix H, then the dual code, 
C , has generator matrix H and parity check matrix G. 

2.3 Quantum Error Correction 
2.3.1 Introduction 

For more detailed information about quantum error correction, we refer to some 
of the many introductions to the subject |25l I32I l36j| . 

A major problem for the implementation of quantum computers is that it is 
impossible to totally isolate a few qubits from the rest of the world. The qubits 
will rapidly interact with the environment, and entanglement will be destroyed 
in a process known as decoherence. Because of decoherence, the state of a 
quantum register will not remain stable for long enough time to do any useful 
computations. We have seen that we can not observe a quantum state without 
destroying entanglement, and that we can not make copies of it. Surprisingly, it 
was shown by Steane and Shor that quantum error correction is still possible. It 
can even be shown that it is possible to process quantum information arbitrarily 
accurately, given that the effects of decoherence can be kept under a certain 
threshold for each step of the computation. 

A classical bit can only have one of two vàlues, or 1, and the only possible 
error is a bit-fhp. A qubit has a continuous state space, since a and j3 in the 
expression a |0) + /3 |1) can take any complex vàlues. Since any 2x2 unitary 
matrix describes a possible transformation, an infinitc numbcr of different errors 
may affect a singlo qubit. 

Proposition 2.19. The set of Pauli matrices, introduced in \Definition 2.1\ 

span the space of 2 x 2 unitary matrices. Any error on a single qubit, \<j)) —f 
E\<j>) , may therefore be expressed as a linear combination of the Pauli matrices, 

\4>) -> (al + ba x + co y + do z) \<j>) =a\4>)+ ba x \<j>) + ca y \<j>) + da z \<j>) . (2.11) 

We will see that the error correction process causes the superposition in (|2.11|l 
to collapse into one of four states, so that we observe no error with probability 
|et| 2 , a bit-fhp error with probability |ò| 2 , a phase-flip error with probability |c| 2 , 
and a combined bit-fhp and phase-flip error with probability |<i| 2 . The process 
will also determine which Pauli error has occurred. We can then recover the 
state |0) by applying the same Pauli transformation, since all the Pauli matrices 
are self-inverse. This procedure is performed without observing the state \<j>) 
directly, but by comparing the vàlues of several qubits. A comparison of two 
qubits can be done without lcarning the value of either qubit, and therefore 
without collapsing their superpositions. 

As in the classical case, quantum error correction is done by adding redundant 
qubits which are used to detect or correct errors. A quantum code encodes k 
qubits using n qubits. It has 2 k basis codewords, but any linear combination 
of those is also a vàlid codeword, since the code must be able to encode all 
superpositions of the basis states. We assume that errors affect each qubit 
independently, which may in reality not be the case. We describe the errors by 
error operators, which are tensor products of Pauli matrices. The weight of an 
error operator is the number of positions in which it is different from identity. 
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For instance, the error operator I®a x ®cr z ®I®I has weight 2. Note in 
particular that a combined bit-flip and phase-flip error only count as one error. 
If the errors described by all Pauli error operators of weight up to t can be 
corrected by a code, then the code can correct an arbitrary error affecting up 
to t qubits. If a code should be able to correct the two errors E a and Ei,, then 
the code must be able to teli the difference between E a \<f>i) and Ef, \c/>j), the 
two errors operating on two different basis codewords. To guarantee that this 
is possible, the vectors corresponding to the states E a \<f>i) and Eb \<j>j) must be 
orthogonal. 

Example 2.20. The repetition code is a simple classical code that encodes a 
bit by making a number of copies of it. Decoding is achieved by a majority 
rule. Quantum coding is not that easy, since qubits can not be copied, but it is 
possible to encode, for instance, one qubit using three qubits by mapping the 
basis states |0) to |000) and |1) to 1 111). The state \<j>) = ot |0) + |1) would in 
that case be encoded into — ce |000) + (3 1 1 1 1) . Note that these three qubits 
are highly entangled, and not three independent copies of |</>). This code can 
correct any single bit-flip, but does not correct phase-flips. Consider the error 
(a x = et 1 100) + /3 |011). We can not observe the value of any qubit, 

but it is possible to compare two qubits and learn if they have the same value. 
Comparing the first and second qubit telis us that they are different, so one 
of them must be wrong. When we find that the second and third qubits are 
equal, we know that the error is in the first qubit, assuming only one error has 
oceurred. We bit-flip the first qubit to correct the error. This code is also able 
to correct any linear combination of single bit-flip error operators. Consider, 
for instance, the error 

&<r x <g> I <8> I + -=1® cr x ® I) \i/>) = \{a |100) + /? |011» + ~(a |010) + p |101)). 
5 5 5 5 

When we compare the vàlues of the qubits, this superposition will collapse into 
a |100) + P |011) with probability ^ and a |010) + /? 1 101) with probability |§. 
The results of the comparisons will be according to the chosen state, and the 
error correction proceeds as in the previous case. 

In order to learn what error we must correct, a number of extra qubits, known 
as an ancilla, are added temporarily. After appropriate transformations, we may 
read a syndrome, which telis us what error has oceurred, from these qubits. It 
is in fact the act of measuring the syndrome that collapses the superposition of 
errors into a single error. 

Example 2.21. A code that can correct both bit-flips and phase-flips is Shor's 
"nine-qubit repetition code". This code maps |0) to (|000) + |111))(|000) + 
|111))(|000) + |111» and |1) to (|000) - |111))(|000) - |111»(|000) - |111». Bit- 
flips are corrected by the inner layer of this code, by exactly the same procedure 
as m |Examplc 2.2Ü| By comparing the signs of the three outer blocks, we may 
correct any single phase-flip. The two steps are actually independent, so both 
one phase-flip and one bit-flip can always be corrected. Note that a phase-flip 
on the first qubit followed by a phase-flip on the second qubit, i.e., the error 
operator a z ® a z ® / ® • • • ® /, leaves a codeword unchanged. The code need 
not be able to correct this error, nor to teli which qubit in each block of three 
has been affected in case of a phase-flip. Codes where any error operator has 
this property are called degenerate codes. 

Definition 2.22. The minimum distance, d, of a quantum code, is the min- 
imum weight error operator that gives an errored state not orthogonal to the 
original state, and therefore not guaranteed to be detectable. 
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It follows from |Proposition 2.15| that a quantum code with d > s + 1 can 
detect s errors, and that a quantum code with d > 2t + 1 can correct t errors. 

Definition 2.23. A quantum code that encodes k qubits using n qubits and 
have distance d is called an [[n, k,d]] code. 

The double brackets helps us distinguish a quantum code from a classical 
code. The nine-qubit code described in |Examplc 2.21| is a [[9, 1,3]] code. 

2.3.2 Stabilizer Codes 

An [[n, k, d]] quantum code can be described by a stabilizer given by a set of 
n — k error operators. Such codes are called stabilizer codes |24i l25l] . 

Consider the nine-qubit code from |Example 2.2Ï] When we compare the two 
first qubits to detect a possible bit-fhp in one of them, what we really do is 
to measure the eigenvalue of the operator M\ — a z ® a z ® l ® ■ ■ ■ ® 1 1 i.e., 
we find the value m in M\ \<p) = m|</>). If the qubits have the same value, 
then the result is +1, and otherwise it is — 1. To compare the first two three- 
qubit blocks to detect a phase-flip in one of them, we measure the eigenvalue 
of a x ® a x <g> a x ® a x <£> a x ® <j x ® I ® I ® I . The complete stabilizer for Shor's 
nine-qubit code is given by the 8 operators, 
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The error we want to detect anticommutes with the operator we actually 
measure, since the Pauli operators anticommute, i.e., AB = —BA, where 
A,B € {<J Xl <J y ,<J z } and A ^ B. For a vàlid codeword, it must be true for 
all i that Mi \<j>) = \<f>), i.e., that the eigenvalue of all operators is +1. If a 
correctable error has occurred, the set of operators that give eigenvalues — 1 
will identify the error. Consider, for instance, the error E — <7 X ® / ® • • • ® J, 
a bit-fhp error on the first qubit, which takes \<p) to E \ <p). E will anticommute 
with Mi, so M±E\<f>) — —EMi \<f>) = —E\<j)), and the resulting eigenvalue is 
— 1. Likewise, E will anticommute with M 2 , but will commute with the other 
six operators. This gives us a set of eigenvalues uniquely identifying the error 
E. 

The stabilizer, S, is an Abelian group generated by the set oïn — k operators. 
(An Abelian group is a group where all elements commute.) S consists of all 
operators M for which M\<f>) — \<j>) for all codewords \<j>). Two given errors 
can be corrected if there exists an operator in S that can distinguish them, 
i.e., measuring the eigenvalue of the operator gives different vàlues for the two 
errors. Let the centraliser of S, C(S), be the set of errors that commute with 
all the n — k generators of S. C(S)\S is then the set of errors that are not 
detectable. Hence, the distance, d, of a stabilizer code is the minimum weight 
of any operator in C(S)\S. 

In |Examplc 2.2l| we studied a [[9, 1,3]] stabilizer code. This code does not 
represent an optimal way of encoding one qubit with the possibility of correcting 
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any single error. In fact, there exists a [[5, 1, 3]] code. The 4 operators generating 
its stabilizer are given by the following matrix, each row corresponding to one 
operator. 
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An alternate representation of the stabilizer S uses two binary matrices, the 
bit-flip matrix X and the phase-flip matrix Z. Let Xíj — 1 when Síj = o~ x or 
Si j = <7 V , and Xíj — otherwise. Let Zíj = 1 when Síj = u z or Síj = o y . 
and Zjj = otherwise. We combine the two matrices to make the nx2n binary 
stabilizer matrix = (Z | X). For the [[5, 1,3]] code, we get 

/011G010010\ 
0011001001 
h ~ 0001110100 ' 

yioooioioio/ 

2.3.3 Quantum Codes over GF(4) 

Proposition 2.24 (Calderbank et al. [Ï3). We can consider a quantum er- 
ror correcting code as an additive code over the finite field GF(4) , by identify- 
ing the four Pauli matrices with the elements of GF(4). We denote GF(4) = 
{0, 1, ui, u> 2 }, where lo 2 = lo + 1. The mappings used are I*—>0,<j z *—>1,<7 x *-^üj, 
and o y i— * üj 2 . 

As an example, the [[5, 1, 3]] code previously described can be represented by 
the additive code over GF(4) generated by the matrix 

fui 1 1 u> 0\ 
„ _ u> 1 1 ui 

ui ui 1 1 ' 
\1 u> ui 1/ 

Definition 2.25. Conjugation in GF(4) is defined by x — x 2 . The trace map, 
tr : GF(4) i— * GF(2), is defined by tr(a;) = x + x. The trace inner product of 
two vectors of length n over GF(4), u and v, is given by u * v — ^ r ( u ïW)- 

In addition to replacing the symbols we use, we must make sure that the 
properties of a stabilizer code are preserved in a code over GF(4). A stabilizer 
is a group generated hy n — k operators. This corresponds to an additive subset 
of GF(4) n , generated by n—k vectors. The stabilizer is an Abelian group, which 
means that any two operators in the stabilizer commute. The corresponding 
property of an additive code over GF(4), C, is that any two codewords, u, v e C, 
must have trace inner product u * v = 0. This is equivalent to saying that the 
code must be self-orthogonal with respect to the trace inner product, or that 
C Ç C- 1 , where C 1 - = {u e GF(4) n | u * c = 0, Vc e C}. If the stabilizer S 
corresponds to C, then the centraliser C(S), the set of errors that commute with 
all generators of S, corresponds to C^. The set of undetectable errors, C(S)\S, 
corresponds to C _L \C Hence, the weight of the minimum weight non-zero vector 
in C^\C is the distance of a quantum code over GF(4). 

2.3.4 Self-Dual Quantum Codes 

The codes studied in this thesis will be of the special case where the dimension 
k = 0. A zero-dimensional stabilizer code with high distance represents a single 
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quantum state which is robust to error, sometimes called a stabilizer state. 
Codes of higher dimension can be constructed from zero-dimensional quantum 
codes, but identifying stabilizer states is also an interesting application in itself, 
since the states corresponding to codes of high distance will be highly entangled. 
Highly entangled quantum states could be used for testing the decoherence 
properties of a quantum computer, and it has also been shown that a one- 
way quantum computer can be implemented by performing measurements on 
a particular class of entangled states, known as cluster states H,S)E3- An 
[[n, 0, d]) code is nondegenerate by definition, and is generated by an n x n 
generator matrix, corresponding to an (n, 2 n ,d) classical code. The GF(4)- 
representation of such codes will be self-dual, i.e., C — C , and we therefore 
call zero-dimensional quantum codes of this type self-dual quantum codes. The 
distance of a self-dual quantum code is simply the minimum distance of C, i.e., 
the weight of the minimum weight codeword in C. 

Example 2.26. As an example, consider the self-dual quantum code with 
generator matrix 



C 



There are 64 GF(2)-linear combinations of the 6 rows of C . In addition to the 
all-zero codeword, we have 45 codewords of weight 4 and 18 of weight 6. This 
is therefore a [[6, 0, 4]] code. 

Definition 2.27. We distinguish between two types of self-dual quantum codes. 
A code is of type II if all codewords have even weight, otherwise it is of type I. 
It can be shown that a type II code must have even length. 

Theorem 2.28 (Rains and Sloane |47|). Let di be the minimum distance of a 
type I code of length n. Then di is upper-bounded by 

if n = (mod 6) 
dj<{2LfJ+3, ifn = 5 (mod 6) (2.12) 
otherwise. 

There is a similar bound on du, the distance of a type II code of length n, 
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d n < 2 



(| ■ 2. (2.13) 



A code that meets the appropriate bound is called extremal. Calderbank 
et al. also use a linear programming bound 0] on the distance of self-dual 
quantum codes and giye a table of the best bounds. This table has later been 
extended by Grassl 27]. For some lengths, no code meeting the best upper 
bound on distance has been discovered, so it remains uncertain whether such a 
code exists. In particular, for n — 24, the best known self-dual quantum code 
has distance 8, while the upper bound is 10. Let d m be the highest attainable 
distance for self-dual additive codes over GF(4). (Non-additive codes |46j with 
higher distance may exist.) ITable 2.H shows. for lengths up to 30, the vàlues of 
di, du and d m . Note that type II codes where the length is a múltiple of 6, 
i.e., 6, 12, 18, 24 and 30, are particularly strong codes. 
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Table 2.1: Bounds on the Distance of Self-Dual Quantum Codes 
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Chapter ^/ 

Quantum Codes and Graphs 



3.1 Introduction to Graph Theory 

A graph is a pair G = (V,E), where V = {vo, vi, . . . , i> n -i} is a set of n 
vertices (or nodes), and E is a set of distinct pairs of elements from V, i.e., 
E Ç V x V. A pair {vi,Vj} S E is called an edge. We will only consider 
undirected graphs, which are graphs where E is a set of distinct unordered 
pairs of elements from V . Furthermore, the graphs we will look at will all be 
simple graphs, which are graphs with no self-loops, {ví,Ví} £ E. A graph 
G' = (V, E') that satisfies V ÇV and E' Ç £ is a subgraph of G, denoted 
G' Ç G. Given a subset of vertices A Ç V, the induced subgraph G(A) C G 
has vertices A and edges {{ví, vj} G E \ V{, Vj G A}, i.e., all edges from E whose 
endpoints are both in A. The complement graph G has vertices V = V and 
edges E = V x V — E, i.e., the edges in E are changed to non-edges, and the 
non-edges to edges. 

Two isomorphic graphs are structurally equal, but the labelling of the ver- 
tices may diffcr. Morc formally, two graphs G = (V, E) and G' = (V, E') are 
isomorphic iff thcrc cxists a permutation tt of V such that {vi,Vj} G E <í=> 
{ir{v i ),ir(vj)}eE f . 

A graph may be represented by an adjacency matrix T. This is a \V\ x \V\ 
matrix where Tíj — 1 if {ví,vj} G E, and T^j = otherwise. For simple 
graphs, the adjacency matrix must have Os on the diagonal, i.e., r^j = 0. The 
adjacency matrix of an undirected graph will be symmetric, i.e., Tíj = Tjj. 

Two vertices are called adjacent (or neighbours) if they are joined by an 
edge. The neighbourhood of a vèrtex v, denoted N v , is the set of vertices that 
are adjacent to v. The vèrtex degree (or valency) of a vèrtex is the number 
of neighbours it has. A regular graph is a graph where all vertices have the 
same degree. A regular graph where all vertices have degree k is called a k- 
regular graph. We will also denote any fc-regular graph on n vertices iÇ. Note 
that i?k does not uniqucly dcfinc a graph; there may be sevcral non-isomorphic 
graphs Rf^ for the same value of k and n. A strongly regular graph [ll| with 
parameters (rz., k, X, n) is a fc-regular graph on n vertices, with the additional 
property that any two adjacent vertices have A common neighbours, and any 
two non-adjacent vertices have /i common neighbours. An example of a strongly 
regular graph with parameters (10,3,0,1) is the well-known Petersen graph, 
shown in |Figure 3.1| 

A complete graph is a graph where all pairs of vertices are connected by an 
edge. The complete graph on n vertices has (™) undirected edges. A clique is 
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Figure 3.1: The Strongly Regular Petersen Graph 



sl complete subgraph. A fc-clique is a clique consisting of k vertices. We will use 
the notation K n for both complete graphs on n vertices and n-cliques. Note that 
K n = -R™ -1 and that K n does define a unique graph, up to isomorphism. An 
independent set is the complement of a clique, i.e., a subgraph with no edges. 
The independence number, a(G), is the size of the largest independent set 
in G. A bipartite graph is a graph where the vertices can be partitioned into 
two independent sets, i.e., V = A U B where the induced subgraphs G{A) and 
G(B) both contain no edges. 

A path is a sequence of vertices (uq, u%, . . . , Uf--i) where {uq, «i}, {u%, M2}, 
. . . , {ufc-2, Uk-i} £ E. A connected graph is a graph where there is path 
from every vèrtex to all other vertices. A simple path never visits the same 
vèrtex more than once. A cycle (or circuit) is a path (uq,Ux, . . . ,Uk-x, ito)) 
i.e., a path that starts and ends at the same vèrtex. A simple cycle never 
visits the same vèrtex more than once, except the first vèrtex, which is also 
visited last. Let C n denote the graph consisting of only a simple cycle on n 
vertices. Note that C n — and that C„ does define a unique graph, up to 
isomorphism. A Hamiltonian path is a simple path that visits every vèrtex 
of the graph once. If there is also an edge between the first and the last vèrtex 
of a Hamiltonian path, wc havc a Hamiltonian cycle. 

A hypergraph, G = (V,E), is a generalised graph where an edge may 
connect more than two vertices. An edge, e € E, of a hypergraph is given by 
a set of at least two vertices, e = {uq, Ui, . . . , Ufc_i}. Edges on more than two 
vertices are called hyperedges. 



3.2 Graph Isomorphism with nauty 

Dctcrmining whcther two graphs are isomorphic is considered to be a hard prob- 
lem, but an efficient algorithm has been developed by McKay and implementcd 
in the program nauty |35| . nauty can also produce a canonicai reprès entative 
of a graph. The canonicai representative is isomorphic to the original graph, 
but may have a different vèrtex labelling. This labelling is arbitrary with no 
special properties, but it is chosen in a consistent way such that all isomorphic 
graphs will have the same canonicai representative. nauty also includes a utility 
called geng which can generate all non-isomorphic graphs on a given number 
of vertices. 
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Checking for hypergraph isomorphism is not directly supported by nauty, but 
nauty can detect isomorphism of graphs where the vertices have been divided 
into a set of disjoint partitions, V = P\ U P 2 U ■ ■ • U Pk- Two such partitioned 
graphs are isomorphic if their partitions are of the same sizes, and if a relabelling 
of the vertices of one of the graphs produces the other, with the restriction that 
labels can only be exchanged within partitions. There is one-to-one mapping 
between a hypergraph, G — (V,E), on n vertices with m hyperedges and an 
ordinary graph, G' = (V, E'), on n + m vertices with partitions of size n and 
m. We first add all vertices in V to V and all simple graph edges in E to E' . 
For each hyperedge, € E, < i < to, we add an extra vèrtex, v„+i, to V . If 
e, = {uq,ui, . . . , we add the k edges {tt , v n+i },..., {u k -i,v n+i } to E' . 

The canonical representative of G' is found by nauty, and the result is mapped 
back to a hypergraph, which is the canonical representative of G. 

Example 3.1. We have the hypergraph G = (V,E) with V — {vq, Vi, v 2 ,v 3 } 
and E = {{v ,vi,v 2 }, {vi,v 2 ,v 3 }, {v-l,v 2 }, {«1,^3}}- We map this hypergraph 
to the graph G' on 6 vertices with edges E' = {{vi,V2}, {vi,^}, {vq,V4}, 
{vi,v±}, {v2,Vi}, {«1,1)5}, {«2,^5}, {113, U5}}, where the vertices are partitioned 
into the sets {uq, Vi, v%, 1)3} and {w4,W5}. We use nauty to find the canonical 
labelling of this partitioned graph, and we then map the resulting graph to 
the hypergraph G" = (V, E"), where E" = {{^0,^2,^3}, {vi,v 2 ,v 3 }, {vi,v 3 }, 
{^2)^3}}. Any hypergraph isomorphic to G will also have canonical represen- 
tative G". 



3.3 Graph Codes 

Definition 3.2. A graph code is a self-dual additive code over GF(4) with 
generator matrix C = T + u)I, where / is the identity matrix and T is the 
adjaceney matrix of a simple undirected graph, which must be symmetric with 
Os along the diagonal. 

Example 3.3. Consider the graph shown in |Figure 3.2a| This graph has ad- 
jaceney matrix 
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The corresponding self-dual additive code over GF(4) is generated by the matrix 



C = T + lüI = 
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The same code can also be described using stabilizcr formalism. The stabilizer 
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(a) The "2-clique of 3-cliques" (b) The "Wheel Graph" 

Figure 3.2: Two Graph Reprès entations of the [[6,0,4-]] Hexacode 

code is generated by operators given by the rows of the matrix 
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Stabilizer codes of this type are known as graph codes, and the single quantum 
states they encode are called graph states. 

Schlingemann and Werner |54j studied quantum codes associated with graphs, 
and first proved the following theorem. Briegel and Raussendorf 8] had previ- 
ously studied arrays of entangled partides, which can be modelled by graphs. 

Theorem 3.4 (Schlingemann and Werner Grassl et al. j^, Glynn j^], 
and Van den Nest et al. |5í|). For any self-dual quantum code, there is an 
equivalent graph code. This means that there is a one-to-one correspondence 
between the set of simple undirected graphs and the set of self-dual additive 
codes over GF(4). 

It follows from lThcorcm 3.4l that. without loss of generality, we can restrict 
our study of self-dual additive codes over GF(4) to those with generator matrices 
of the form T + u>I. 

Van den Nest et al. describe the following algorithm for transforming 
any stabilizer code into a graph code. We will operate on the transpose of 
the binary stabilizer matrix, T — Sj — (xt) — (^)- It is easy to see that a 
graph code given by the adjacency matrix T corresponds to the binary stabilizer 
Sb = (r | J), and to the transpose binary stabilizer T — (^). Our goal is to 

convert T = (^) , the transpose binary stabilizer of a given code, into T' = ( A j), 
the transpose binary stabilizer of an equivalent graph code. A! will then be the 
adjacency matrix of the corresponding graph. Right-multiplying T with an 
invertible n x n matrix will perform a basis change, an operation that gives 
us an equivalent stabilizer code. If B is an invertible matrix, we can simply 
multiply T by the inverse of B and get TB^ 1 = (^f*)- AB^ 1 will then be 
the resulting adjacency matrix. If this matrix has elements on the diagonal 
that are not 0, those elements may simply be changed to 0. In some cases B 
may not be invertible. It has been proved by Van den Nest et al. |5^| that T 
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can then always be transformed into an equivalent code T' — ( B ,) , where B' is 
invertible. They also show how the appropriate transformation is found. 



Example 3.5. We are given the following generator matrix of a [[6,0,4]] sta- 
bilizcr code. 

fa x I I o z 

I X I Oy 

I I a x 

I g z I 

I cr z a z 
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The corresponding binary stabilizer is 



S h = {Z\X) = 
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Let A — Z T and B = X T . The transpose binary stabilizer is then T = (g) 
Since B is invertible, 



TB -i = l 



/0 1 1 1\ 
110 1 
10 110 
111111 
10 110 
110 10 



1 

1 

1 

1 

1 

\0 1/ 



We set the nonzero diagonal element in AB 1 to and get the adjacency matrix 
of the simple undirected graph shown in |Figure 3.2b| 



3.4 Efficient Algorithms for Graph Codes 

We have seen that a graph code, C, is a self-dual additive code over GF(4) whose 
generator matrix is of the form T + uiI. It can be shown that the additive code 
over Z4 given by 2T + I has the same weight distribution as C. For graph codes, 
but not in the general case, we may therefore replace the elements from GF(4) 
with elements from Z4 by the mappings 1 — >■ 0, 1 1 — > 2, w 1 — s- 1, cu 2 1 — ^ 3. 

Example 3.6. A self-dual additive code over GF(4) generated by 

íw 1 1\ 

lü 1 

1 w 1 , 
1 lü 

\1 1 üjJ 



23 



3 Quantum Codes and Graphs 

has the same weight distribution as the additive code over Z4 generated by 

/l 2 2\ 

10 2 

2 1 2. 

2 1 
\2 2 1/ 

The interpretation as a code over Z4 is an advantage when we write computer 
programs to operate on such codes, since Z4 arithmetic may be faster and 
simpler to implement. 

Proposition 3.7. LetC be a self-dual additive code over GF (4) with generator 
matrix C — T + ujI . Let s G C be a codeword formed by adding k different rows 
of C . Then it must be true that wh{s) > k. 

Proof. Each row of C has an element lo, and this element is in a different 
position in each row. All other elements in C are or 1. Let row number i of C 

be one of the rows we added to get s. Element s, will then be ao + a\ H h a^, 

where = u> and aj G {0, 1}, Vj 7^ i. It follows that s, G + 1}- s will 

have fc elements of the same form and therefore Wh{s) > k. □ 

The special form of the generator matrix of a graph code makes it easier 
to find the distance of the code. An [[n, 0,d]] code has 2 n codewords, but if 
the generator matrix is given in graph form, it is not necessary to check all the 
codewords to find the distance of the code. If we have found a codeword s, where 
wh(s) < e, we know that no codeword formed by adding e or more rows of 
the generator matrix can have lower weight. This fact is used in |Algorithm 3.Í] 
A similar technique can also be used to find the weight distribution of a code. 
To find w p , the number of codewords of weight p, only codewords formed by 
adding p or fewer rows of the generator matrix needs to be considered. This 
approach is used by |Algorithm 3.2"] To find the complete weight distribution, 
w = {wq,wi, . . . , w n }, we must generate all codewords, but a partial weight 
distribution, w p — {wq, Wx, . . . , w p }, where p < n, can be found more efficiently. 
We will later use the partial weight distribution to distinguish inequivalent 
codes. 



3.5 Quadratic Residue Codes 

Definition 3.8. A Paley graph, G = (V,E), is constructed as follows. Given 
a prime power m, such that m = 1 (mod 4), let the elements of the finite field 
GF(m) be the set of vertices, V. Let two vertices, i and j, be joined by an edge, 
{i, j} G E, iff their difference is a quadratic residue (square) in GF(m)\{0}, i.e., 
there exists an x G GF(m)\{0} such that x 2 = i — j. 

Proposition 3.9. A Paley graph is a strongly regular graph \lÀ l with param- 
eters (4í + l,2í,£ — l,í), i.e., it has 4í + 1 vertices, each with degree It, and 
the properties that any two adjacent vertices have t—1 common neighbours and 
any two non- adjacent vertices have t common neighbours. 

We will study graph codes based on Paley graphs. Some bounds on the 
distance of self-dual quantum codes constructed from strongly regular graphs 
in general have been given by Tonchev |57|. 

Definition 3.10. A self-dual additive code over GF(4) with generator matrix 
r + ll>I, where T is the adjaceney matrix of a Paley graph, is a type of quadratic 
residue code |23L Í43| . 
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Algorithm 3.1 Finding the Distance of a Graph Code 

Input C: a generator matrix in graph form 
Output d: the distance of the code generated by C 

procedure FindDistance(C) 

d <— oo 
i <- 1 

while i < d do 

for all codewords s, such that s is a sum of i rows do 
if wh (s) < then 
cí <- iüh(s) 
if = i then 
return d 
end if 
end if 
end for 
i <- i + 1 
end while 
return d 
end procedure 



Algorithm 3.2 Finding the Number of Codewords of a Given Wcight 

Input C : a generator matrix in graph form 

p: weight of the codewords we want to count 
Output w p : the number of codewords of wcight p 

procedure CountWeight(C, p) 

w p <— 

for i <— to p do 

for all codewords s, such that s is a sum of i rows do 
if Wh{s) = p then 

w p <— w p + 1 
end if 
end for 
end for 
return w p 
end procedure 
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When p is a prime, the adjacency matrix of the Paley graph on GF(p) will be 
circulant, with each row being the cyclic shift of a Legendre sequence. Let QR 
be the set of all quadratic residues modulo p. a is a quadratic residue modulo 
p iff a ^ (mod p) and the congruence y 2 = a (mod p) has a solution i/ e Z p . 
The Legendre sequence of length p, l p = (7 , h, ■ ■ ■ , l P ~i), is a binary sequence 
with li = 1 if i 6 Q-R, and = othcrwise. Let i p > s be a Legendre sequence 
cyclically shifted s times to the right. Form the p x p matrix T by letting row 
i be l p 3> i, for < i < jj. It can be shown that p must be a prime of the form 
4fc + 1 for r to be symmetric, which is a requirement for the adjacency matrix 
of an undirected graph. 

Definition 3.11. To get a bordered quadratic residue code jlS E3 of length 
í?i + 1, first construct the quadratic residue code of length m. Then add a 
top row of m ls, (1,1,..., 1), to the generator matrix. Finally, add a leftmost 
column with an ui followed by m ls, (uj, 1,1,1,..., 1) T , to the generator matrix. 

Example 3.12. We will construct the quadratic residue code of length 5 and 
bordered quadratic residue code of length 6. The quadratic residues modulo 
5 are QR — {1,4}, and the Legendre sequence of length 5 is l — (0, 1, 0, 0, 1). 



From this sequence we construct the matr 
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This is the adjacency matrix of the Paley graph on 5 vertices, which is the 
graph C5, shown in |Figure 3.3a| r + lüI is the generator matrix of a [[5, 0, 3]] 
quantum code. We border the matrix and get 

/0 1 1 1 1 1\ 

10 10 1 
, _ 110 10 

10 10 10' 

10 10 1 
\1 1 1 0/ 

the adjacency matrix of the "wheel graph", shown in |Figurc 3.3b| which repre- 
sents the extremal [[6, 0, 4]] code, also known as the Hexacode. 

The integers m < 30 where m is a prime of the form Ak + 1 are 5, 13, 17, and 
29. The quadratic residue codes for m = 5, 13 and 29, and their bordered exten- 
sions, achieve the highest possible distance, as given bv ITable 2.Ï1 on page 18. 
For m = 17 the construction gives a [[17,0,5]] code, but there exists a code 
with distance 7. The bordered extension is a [[18, 0, 6]] code, when distance 8 is 
achievable. It can be shown (under some constraints) that there exists a uniquc 
[[18,0,8]] code 0. This code was constructed by Mac Williams et al. usmg 
a construction similar to bordered quadratic residue codes. Glynn et al. [22j 
present the following technique for constructing the [[18, 0, 8]] quantum code. 
For a prime p = 4fc + 1, generate a set, K, of all powers of 4 modulo p. For 
instance, for p = 5, K = {4° = L4 1 = 4}, which is also the set of quadratic 
residues modulo 5. In general, if 2 is a primitive root modulo p, we will con- 
struct a quadratic residue code. This is the case for p — 5, 13 and 29, but for 
p = 17 we get K = {4° = 1, 4 1 = 4, 4 2 = 16, 4 3 = 13}. We then find a partition 
of Zi 7 \{0} into sets that are múltiples of K, Zi 7 \{0} = K U 2K U 3K U 6K, 
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m 

(b) The "Wheel Graph" 
Figure 3.3: Graphs of the QR and BQR Codes for m = 5 

where 2K = {2,8,15,9}, 3K = {3,12,14,5}, and 6K = {6,7,11,10}. We 
must combine two of these sets to make the set H, which must satisfy 2H + 
H = Zi 7 \{0}. The vàlid combinations are H = K U 3K and H = K U 6K. 
Note that the quadratic residue set, K U 2K is not vàlid. The two vàlid 
combinations generate the sequences (0, 1, 0, 1, 1, 1, 0, 0, 0, 0, 0, 0, 1, 1, 1, 0, 1) and 
(0, 1, 0, 0, 1, 0, 1, 1, 0, 0, 1, 1, 0, 1, 0, 0, 1). We make two circulant adjacency ma- 
trices by cyclically shifting the sequences, in exactly the same way as we did 
with Legendre sequences. The two matrices correspond to two [[17, 0, 7]] codes, 
which can be shown to be equivalent. Bordering either of the matrices will 
generate the [[18,0,8]] code. 

Paley graphs and quadratic residue codes can be constructed for any prime 
power m = p n where m = 1 (mod 4). The only possible non-prime lengths 
below 30 are 9 and 25. The generator matrices of these codes are not circulant, 
but they are composed of circulant submatrices. When n = 2, there will be p 2 
p x p circulant matrices. For m = 9, we generate the adjacency matrix 
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This corresponds to a [[9,0,3]] code. The optimal distance for length 9 is 4. 
The bordered [[10, 0, 4]] code is, however, extremal. We have also generated the 
quadratic residue code for m = 25. It is a [[25, 0, 5]] code, and the bordered 
extension is a [[26,0,6]] code. In both cases the best achievable distance is at 
least 8. This suggests that quadratic residue codes of non-prime lengths are not 
as strong as for prime lengths. ITablc 3.ïl summarises the distance of quadratic 
residue and bordered quadratic residue codes for lengths up to 30. 




(a) The C 5 Graph 
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Table 3.1: Distance (d) of Quadratic Residue Codes of Length m and Bordered 
Quadratic Residue Codes of Length m + 1 



QR codes BQR codes 



m d m + 1 d 
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Nested Regular Graph Codes 



4.1 The Hexacode and the Dodecacode 

The unique extremal [[6, 0, 4]] quantum code is also known as the Hexacode. As 
all self-dual quantum codes, it can be represented by a graph with adjacency 
matrix T, such that T + loI is the generator matrix of a self-dual additivc 
[[6, 0, 4]] code over GF(4). One such representation of the Hexacode is given by 
the generator matrix 
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The corresponding graph is shown in |Figurc 4.1a| The figure emphasises the 
fact that the graph consists of two instances of the complete graph K3, or 
equivalently, that there are two 3-cliques in the graph that partition all six 
vertices into two disjoint sets. We also see that each vèrtex in each 3-cliquc 
is connected to exactly one vèrtex in the other 3-clique. We will view these 
connections as an "outer" 2-clique; the rationale behind this will become clear. 
We call the whole graph a "2-clique of 3-cliques", or ^[-^3] for short. We also 
note that C is a circulant matrix, and that all vertices have vèrtex degree 3. 

Another wcll-known unique extremal quantum code is the [[12,0,6]] Dode- 
cacode. It can be represented as a graph code with a circulant generator ma- 
trix whose first row is (wOOlOl 110100). The corresponding graph is shown in 
|Figure 4.1c| We see how this graph can be called a "3-clique of 4-cliques", or 
K 3 [Ki}. 

Definition 4.1. A general nested clique graph, G = (V, E), can be described 
as an "ni-clique of ri2-cliques of • • • of n;-cliques", denoted K ni [K n2 [- ■ ■ [K ni ])]. 
The number of vertices in the graph is n = n\n2 ■ ■ ■ n\_. It must be possible to 
partition the vertices into — disjoint subsets of size ni, V = V\ U V2 U • • • U V_^, 
such that the induced subgraph on each subset is the complete graph K ni . Let 
Ei be the edges of the induced subgraph on Vi. Let E^ be the set of edges 
{w, v} where u £ Vi and v G Vj. \Eij \ must be either or íi;. If \Eij \ is n;, every 
vèrtex in Vi must be connected to one vèrtex in Vj , and every vèrtex in Vj must 
be connected to one vèrtex in Vi. If this is the case, we say that the sets Vi 
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and Vj are connected. All edges in E must be part of a clique or a connection 
between cliques, i.e, \J i Ei Ui i ^ij = We then form the graph G' = (V, E') 
on ^- vertices, each vèrtex v\ S V corresponding to a subset Vi C V. Let there 
be an edge between v\ and ^ iff Vi and V, are connected. G' must be the nested 
clique graph K ni [K n2 [- ■ ■ [K ni _^[, or, if l = 2, G" must be the complete graph 

There may be many non-isomorphic K ni [K n . 2 [■ ■ ■ [K ni ]]\ graphs, so the nested 
clique characterisation does not uniquely identify a graph, but only partially 
describes its structure. In particular, the connections between the inner cliques 
of a nested clique graph are not defined. For instance, in the ^[Ü^] graph 
shown in |Figure 4.1c| the 12 edges that are not part of an inner 4-clique form a 
Hamiltonian cycle. Another K^K^ graph, where these 12 edges form four dis- 
joint cycles of length three (or four 3-cliques), corresponds to a [[12, 0, 4]] code. 
This means that a highly regular nested structure is not enough to guarantee 
optimal distance. 



4.2 Graph Codes with Minimum Regular Vèrtex Degree 

Proposition 4.2. All vertices of a graph corresponding to an [[n, 0, d]] quantum 
code have a vèrtex degree of at least d — 1 . 

Proof. If a graph has a vèrtex Vi of degree S, then the ith row of the adjacency 
matrix, T, will have weight S. The ith row of the generator matrix, T+loI, of the 
corresponding self-dual additive code over GF(4), will then define a codeword 
of weight S + 1. A vèrtex with degree less than d — 1 would therefore correspond 
to a codeword of weight less than d, which is impossible. □ 

Proposition 4.3. In a k-regular graph with an odd number of vertices, k must 
be even. 

Proof. Let A be the sum of the vèrtex degrees of all vertices in a graph. Since 
each edge of a graph is incident on two vertices, A = 2\E\, i.e., twice the number 
of edges. It follows that A must always be an even number. In a fc-regular graph 
on n vertices, A = kn, and thus either k or n must be an even number. □ 

Definition 4.4. If a graph corresponding to an [[n, 0, d]] quantum code has a 
regular vèrtex degree of d — 1, then it has minimum regular vèrtex degree. By 
|Proposition 4.3| if n is odd and d is even, a regular vèrtex degree of d — 1 is 
impossible. In this case, a regular vèrtex degree of d is the minimum regular 
vèrtex degree. 

The graph representation of the Hexacode shown in |Figure 4.1a | is 3-reg ular, 
and the graph representation of the Dodecacode shown in [Figure 4.1c| is 5- 
regular. With the distances of the two codes being 4 and 6, respectively, we 
conclude that the graph representations of both codes have minimum regular 
vèrtex degree. This also implies that no other graph representation of these 
two codes can have a smaller number of edges. When n is odd and d is even, 
a graph representation with minimum regular vèrtex degree is not necessarily 
the graph representation with the fewest edges. 

Proposition 4.5. The nested clique graph K ni [K n2 [■ ■ ■ [K ni ]]\ is a k-regular 
graph, where k — (ni — 1) + (712 — 1) + • ■ ■ + (nj — 1). 
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(e) K 5 [K 4 ] Graph of a [[20,0,8]] Code (f) K 5 [K 5 ]] Graph of a [[25,0,8]] Code 

Figure 4.1: Nested Clique Graphs 
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Proof. Every vèrtex of the graph has n; — 1 neighbours as part of an n/-clique. 
Each vèrtex must also be connected to one vèrtex in n;_i — 1 other ri;-cliques, 
which contributes n/_i — 1 to its degree. The same must be true for the other 
layers of nesting. □ 



4.3 Other Nested Regular Graph Codes 

We have observed that the extremal [[6,0,4]] code corresponds to a ííaf-Ks] 
graph, and that the extremal [[12,0,6]] code corresponds to a K^f-KV] graph. 
The intuitive next step is to search for an extremal [[20, 0, 8]] code among .K^ATs] 
graphs. An exhaustive computer search of all ^4^5] graphs did, however, 
not find such a code. The best result was a [[20,0,6]] code, but with only 3 
codewords of weight 6 and none of weight 7. 

Searching through all undirected graphs on n vertices is infeasible for 
graphs with more than a few vertices. We have seen that the Hexacode and 
the Dodecacode have graph representations with circulant adjacency matrices, 
and this is also true for all quadratic residue codes of prime length. It there- 
fore seems reasonable to restrict our search to the circulant symmctric 

adjacency matrices of graphs on n vertices. We have performed an exhaustive 
search of these graphs for n < 30. The most important parameter to optimise is 
the distance of the quantum code. For each length n, we identify the circulant 
adjacency matrices corresponding to [[n,0, d]] codes with optimal distance, as 
listed in ITable 2.11 on page 18, or highest possible distance if no codes with op- 
timal distance are found. We next want to minimise the regular vèrtex degree. 
Among the graphs corresponding to codes with highest possible distance and 
with lowest possible regular vèrtex degree, we try to identify structures similar 
to the nested clique representations of the Hexacode and the Dodecacode. Al- 
gorithms for finding all cliques in a graph have a running time that increases 
cxponentially with the number of vertices. But we will only consider graphs 
of up to 30 vertices, and finding all cliques in such graphs can be done quickly 
with a suitable algorithm 9]. ITable 4.Tl summarises the results of the search by 
showing data about one code of each length. Distances and degrees marked * 
in the table are not optimal. Degrees marked f are equal to d, but still optimal 
according to |Proposition 4.3| Some of the nested regular structures identified 
can be seen in ^rgure 4.1| and |Figure 4.2| 

Proposition 4.6. A graph, G, with no isolated vèrtex, i.e., no vèrtex with 
degree 0, corresponds to a self-dual [[n, 0, d]] quantum code, C, with minimum 
distance d > 2. 

Proof. It follows from |Proposition 3.7| that any codeword with non-zero weight 
formed by adding 2 or more rows of the generator matrix of C will have weight 
higher than 2. A codeword of weight less than 2 must therefore be a row of the 
generator matrix. A vèrtex in G with degree 8 > 1 corresponds to a row in the 
generator matrix of C, and hence a codeword, of weight S + 1 > 2. □ 

n = 2, 3, and 4 are not particular ly interesting cases, since any graph with 
no isolated vèrtex will correspond to a code with d = 2. Graphs with minimum 
regular vèrtex degree representing extremal self-dual quantum codes of length 2, 
3, and 4 can be described as K2, K3, and K2 + K2 (two unconnected 2-cliques), 
respectively. For lengths 5 and 7, the extremal distance is 3. The minimum 
regular vèrtex degree is 2, and the only 2-regular graph structure is the cycle 
graph. C5 and C7 correspond to [[5,0,3]] and [[7,0,3]] codes. For n = 8, a 
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Table 4.1: Nested Regular Graphs with Degree 8 Corresponding to Circulant Graph 
Codes of Length n and Distance d 
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(c) R%[K 3 ] Graph of a [[27,0,8]] Code 
Figure 4.2: Nested Regular Graphs 
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(a) K2IC4] Graph (b) Cubical K 2 [C 4 ] Graph 



Figure 4.3: Two K-z\CÀ\ Graphs Corresponding to [[8,0,4]] Codes 

graph with minimum regular vèrtex degree and extremal distance consists of 
two 4-cycles which are connected in an "outer" 2-clique. This graph is depicted 
in |Figure 4.3a| We see that we need to extend our definition of nested clique 
graphs to nested regular graphs. Recali that R^ denotes a fc-regular graph on n 
vertices, i?™ -1 = K n , and R\ = C n . 

Definition 4.7. For a general nested regular graph, G = (V,E), we use the 
notation R* 1 [R„ 2 2 [• • • [-RnJ]]- The number of vertices in the graph is n — 
n\n2 ■ ■ - ni. it must be possible to partition the vertices into ^- disjoint subsets 

of size ni, V = Vi U V% U • • • U V_e_ , such that the induced subgraph on each 

71 1 

subset is a fc;-regular graph, R* 1 . Let Ei be the edges of the induced subgraph 
on Vi. Let Eij be the set of edges {u, v} where u € Vi and v G Vj. [-Ey | must be 
either or n;. If \Eij | is n/, every vèrtex in Vi must be connected to one vèrtex 
in Vj , and every vèrtex in Vj must be connected to one vèrtex in Vi . If this is 
the case, we say that the sets Vi and Vj are connected. All edges in E must be 
part of a subset or a connection between subsets, i.e, \J t Ei \J i ■ Eij — E. We 
form the graph G' — (V , E') on ^- vertices, where each vèrtex w' 6 V' corre- 
sponds to a subset V, C V. Let there be an edge between v\ and v'j iff Vi and 

Vj are connected. G' must be the nested regular graph R^\ [R^ 2 2 [■ • ■ [RniZ\]]] or, 
if l = 2, G' must be the regular graph ü^i . 

Proposition 4.8. R k n \ [tí™ [■ • • [R% ]]] is a regular graph with vèrtex degree k\ + 
k 2 + --- + k. 

Proof. Every vèrtex of the graph has ki neighbours as part of a fc; -regular 
subgraph. Each vèrtex must also be connected to one vèrtex in fc;_i of the 
— 1 other /cj-regular graphs, which contributes to its degree. The 
same must be true for the other layers of nesting. □ 

The cubical graph shown in |Figure 4.3b| is another K2 [C4] graph which also 
corresponds to an [[8, 0, 4]] code. This graph is not isomorphic to the one shown 
in |Figurc 4.3a| and it does not have a circulant generator matrix. For n = 9, 
our search reveals a Kz[K-$ ] graph, as shown in |Figure TTb| For n = 10, we find 
the if2[Cs] graph shown in |Figure 4.4a| The famous strongly regular Petersen 
graph, seen in |Figure 4.4b| can also be described as K% [C5]. It also corresponds 
to a [[10, 0, 4]] code, but does not have a circulant adjacency matrix, and is not 
isomorphic to the ^[Cs] graph in |Figurc 4.4a| A K-^K^ graph corresponding 
to a [[10,0,4]] code also exists, with a suboptimal regular degree of 4. For 
n = 11, we did not find any circulant code with extremal distance d = 5. Sincc 
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(a) K 2 [C 5 ] Graph (b) K 2 [C 5 ] Petersen Graph 



Figure 4.4: Two -fGps] Graphs Corresponding to [[10,0,4]] Codes 

11 and 13 are primes, there can be no nested regular graphs corresponding to 
codes of these lengths. Were we not able to find a nested clique description of 
any graph on 14 or 15 vertices corresponding to an extremal code, and no graph 
with minimum regular vèrtex degree corresponding to a [[15, 0, 6]] code was 
found. For n = 16, we found the C^fiQ] graph shown in |Figurc 4.2a| No nested 
regular graphs exist for the prime lengths 17 and 19. For n — 18, the optimal 
distance is d = 8, but the best code corresponding to a circulant adjacency 
matrix is an [[18, 0, 6]] code. This code can be described as a X2 [-^3 [-K3]] graph 
with minimum regular vèrtex degree. In addition, there also exists a K^Kq] 
graph corresponding to an [[18, 0, 6]] code. For n = 20, we discovered a [[20, 0, 8]] 
code corresponding to a K$ [K4) graph, shown in |Figurc 4.1c| There is no 
circulant extremal code of length 21, and we did not find any nested regular 
graph corresponding to a [[21, 0, 7]] code. Ncither did we find such a graph 
description for any circulant [[22,0,8]] code. For lengths from 23 to 27, the 
best codes we found all have distance 8. According to lTablc 2.11 this distance 
is not extremal, but no codes of higher distance are known, except for length 
27, where a code of distance 9 exists. We did not find nested regular graphs for 
n = 23 or 26, but for n — 24 we found a R§[K4\ graph, as seen in |Figure 4.2b| 
For n — 25 we found the K^[K^\ graph seen in |Figure 4. li) and for n = 27 we 
found the R^[K^\ graph seen |Figure 4.2c| We have also found circulant graph 
codes of extremal distance for lengths 28, 29 and 30, but these graphs do not 
have minimal regular vèrtex degree and can not be described as nested regular 
graphs. 

Gulliver and Kim [2^ have studied the more general case of self-dual additive 
codes over GF(4) with circulant generator matrices. As for all self-dual quantum 
codes, there will be a graph code equivalent to any such code, but the graph 
code will not necessarily be circulant. Gulliver and Kim [2^ also classified some 
other types of circulant based codes for lengths up to 30, but did not find any 
codes with higher distance than we found in our search of circulant graph codes. 

4.4 Long Cycles in Nested Regular Graph Codes 

The nested regular description of a graph does not specify the manner in which 
the regular subgraphs are connected. It turns out that these connections are 
highly structured in nested regular graphs corresponding to strong self-dual 
quantum codes. We have already mentioned that the K^K^ graph represen- 
tation of the Dodecacode has a Hamiltonian cycle. The ^[fíTs] graph, shown 
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in |Figurc 4. lf| corresponding to a [[25, 0, 8]] code, contains two edge-disjoint 
Hamiltonian cycles. We can then account for all the 100 edges of this graph, 50 
being part of inner 5-cliques and 25 of the remaining edges in each Hamiltonian 
cycle. But this is still not a description of a unique graph, as the following 
example shows. 

Example 4.9. Lct G = (V,E) be a K^[K^\ graph. Let the five inner 5-cliqucs 
be on the vèrtex sets V\ — {«o, v%, «2, «3, «4}, V2 = {«5, «6, «7, vs, vg}, 
V 3 = {vio, un, vi2, «13, U14}, Vi = {v ï5 , «16, «17, «is, v%g}, and V 5 = {« 20 , «21, 
«22, «23, «24}- Let the remaining 50 edges form two Hamiltonian cycles given 
by the sequences of vertices, Hi — (üo, «1, «2, «3, «4, «5, «6, «7, «8, «9, «10, vil, 

«12, «13, «14, «15, «16, «17, «18, «19, «20, «21, «22, «23, «24, «o) and H 2 = («0, «7, 
«14, «21, «3, «10, «17, «24, «6, «13, «20, «2, «9, «16, «23, «5, «12, «19, «1, «8, «15, 

«22, «4, «ii, «18, «o)- This graph corresponds to a [[25,0,8]] self-dual quantum 
code. But if we replace the Hamiltonian cycle H2 with H' 2 = («0, «8, «16, «24, 

«7, «15, «23, «6, «14, «22, «5, «13, «21, «4, «12, «20, «3, «11, «19, «2, «10, «18, «1 , 

Vg, «17, «o), we get a [[25,0,6]] code. 

The -Ksf-íCi] graph corresponding to a [[20,0,8]] code, shown in |Figurc 4.1e| 
contains one Hamiltonian cycle, in addition to two vertex-disjoint cycles, each 
visiting half the vertices of the graph. We generated the codes corresponding to 
all ^[i^] graphs with two Hamiltonian cycles, and the highest distanec found 
was 6. Other nested regular graphs listed in lTablc 4.1l also contain Hamiltonian 
cycles or long cycles. Both the nested regular structure and the presence of long 
cycles seem to be important characteristics of the graphs corresponding to self- 
dual quantum codes of high distance. 

Although we have not found a construction technique for nested graph codes 
giving a predictable distance, initial results suggest that the set of nested regular 
graphs give a small search space in which strong codes are likely to be found. 
Randomly generated nested regular graphs with long disjoint cycles typically 
give codes of higher distance than totally random graphs. It seems like the 
long cycles should be arranged in such a way that no smaller cycles are induced 
in the graph. The results shown in lTablc 4.11 suggest that for codes of length 
above 25 and distance higher than 8, graph structures get more complicated. 
To describe these structures, a further generalisation of nested regular graphs 
may be necessary. 
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Orbits of Self-Dual Quantum Codes 



5.1 Local Transformations and Local Complementations 

We have seen that an [[n,0, d]] quantum stabilizer code represents a single 
quantum state, and that all such codes can be transformed into equivalent graph 
codes. The quantum state corresponding to a graph code is known as a graph 
state, and in lsection 6.3l we will see how a state |G) corresponding to a graph 
G can be found. In lsection 2.1l we saw that local unitary transformations are 
reversible transformations that act independently on each qubit in a quantum 
state. If there exists a local unitary transformation U, such that U \ G) = |G"), 
the states \G) and \G') will have the same entanglement properties. If \G) and 
\G') are graph states, we say that their corresponding graphs, G and G', are 
LU- equivalent. G and G" will then represent equivalent quantum codes, with 
the same distance, weight distribution, and other properties. 

Dctcrmining whcther two graphs are LU-equivalent seems like a difficult task, 
but a sufficient condition for equivalence was given by Hein et al. [soj |. Let the 
graphs G = (V, E) and G' = (V,E') on n vertices correspond to the n-qubit 
graph states \G) and \G'). 

Definition 5.1. We define the two 2x2 unitary matrices, 
where u> 4 = í 2 = — 1, and a x and a z are Pauli matrices. 

Definition 5.2. Given a graph G = (V = {0, 1, . . . , n — 1}, E), corresponding 
to the graph state | G) , we define a local unitary transformation, 

U a = ® 7-W (g) T W, (5.1) 

i€N a i^N a 

(i) 

where a € V is any vèrtex, N a C V is the neighbourhood of a, and t x means 
that the transform t x should be applied to the qubit corresponding to vèrtex i. 

Given a graph G, if there exists a finite sequence of vertices (uq, u\, . . . , Uk-i), 
such that U Uk _ 1 ■ ■ -U Ul U Uo \G) = |G'), then G and G' are LU-equivalent. It 
was discovered by Hein et al. jsïj, an d by Van den Nest et al. (H^i that the 
sequence of transformations taking |G) to |G') can equivalently be expressed as 
a sequence of simple graph operations taking G to G'. Exactly the same graph 
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Figure 5.1: Example of Local Complementation 



operation, called vèrtex neighbourhood complementation (VNC), was described 
by Glynn et al. HÜ as an operation that maps equivalent self-dual additive 
codes over GF(4) to each other. VNC is another name for local complementation 
(LC), referred to in the context of isotropic systems by Bouchet [3,0- 

Deflnition 5.3. Given a graph G = (V,E) and a vèrtex v € V, let N v C V 
be the neighbourhood of v. The subgraph induced by N v is complemented 
to obtain the LC image G v , i.e., G V (N V ) = G(N V ). It is easy to verify that 
(G v ) v = G. 

Example 5.4. We will perform local complementation on vèrtex of the graph 
G, shown in |Figure 5.1a| We see that the neighbourhood of is No = {1, 2, 3}, 
and that the induced subgraph on the neighbourhood, G(Nq), has edges {1, 2} 
and {1,3}. The complement of this subgraph, G(Nq), contains the single edge 
{2,3}. The resulting LC image, G°, is seen in |Figure 5. 1 b| 



Theorem 5.5 (Glynn et al. [Ü Üjj], Hein et al. HI, and Van den Nest 
et al. 59]). The graphs G and G' are LC-equivalent, i.e., they correspond 
to equivalent self-dual quantum codes, if there is a finite sequence of vertices 
u ,ui,...,u k -i, such that (((G U0 ) Ul )-) Uk - 1 = G' . 

LC operations on the graph G = (V, E), represented by the adjacency matrix 
r, can also be described in terms of operations on C — T + uil, the generator 
matrix of a self-dual additive code over GF(4). We can then verify that none 
of the matrix operations will change the properties of the code. LC on a vèrtex 
a € V corresponds to the following sequence of operations on C. 

• For all vertices i € N a , add row a to row i in C. This operation, which 
does not change the properties of an additive code, implements the neigh- 
bourhood complementation of the corresponding graph, but also leaves us 
with a code that is not a graph code. The two following steps are needed 
to restore the code to graph form. 

• Scalc column a of C by u, i.e., multiply coordinate a in all rows of C by 
u. Scaling the same coordinate in all codewords by some nonzero value 
gives an equivalent code. 

• For all vertices i S N a U {a}, conjugate column i of C. Conjugating 
coordinates does not change the properties of the code. We now have a 
generator matrix of the form C' = V + u>I. 
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5.2 Enumerating LC Orbits 

Van den Nest et al. jH^ report on an efficient algorithm, first described by 
Bouchet 0, which determines whether two graphs are LC-equivalent by solv- 
ing a set of equations. This algorithm has complexity 0(n 2 ), where n is the 
number of vertices in the input graphs. Note that we can also consider codes 
corresponding to isomorphic graphs to be equivalent, since permuting coordi- 
nates of a self-dual additive code over GF(4) gives an equivalent code. We 
therefore want to detect LC-equivalence of graphs up to isomorphism, which 
means that a permutation of vèrtex labels is allowed before each LC operation. 
Permuting the vèrtex labels of a graph causes the qubits in the corresponding 
graph state to be reordered. Reordering the qubits in a quantum state does not 
change the overall entanglement properties, but can not be performed by any 
local unitary transformation. The above-mentioned algorithm only considers 
equivalence via local unitary transformations, and can therefore not be used to 
detect LC-equivalence up to isomorphism. 

Definition 5.6. The LC orbit L = [G], of a graph G, is the set of all non- 
isomorphic graphs, including G itself, that can be transformed into G by any 
sequence of local complementations and vèrtex permutations. 

Example 5.7. We consider the "2-cliques of 3-cliques" representation of the 
[[6,0,4]] Hexacode shown in |Figure 3.2a| on page 22. An LC operation on any 
vèrtex of this graph will produce a graph isomorphic to the "wheel graph" 
shown in |Figure 3.2b| An LC operation on the "centre" of the "wheel" will 
again produce a graph isomorphic to the "wheel graph", while an LC operation 
on any of the 5 other vertices gives a graph isomorphic to the "2-clique of 3- 
cliques". These two graphs therefore make up the complete LC orbit of the 
Hexacode. 

Let G n be the set of all non-isomorphic simple undirected connected graphs on 
n vertices. (We will later consider a set where unconnected graphs are included.) 
Let C n = {Li, L2, . . • , Lk} be the set of all distinct LC orbits of graphs in Gn- 
All L £ C n are disjoint, and C n is a partitioning of Gn, i-e., lj i Li = Gn- Two 
graphs, G and K, are equivalent with respect to local complementations and 
vèrtex permutations if one of the graphs is in the LC orbit of the other, for 
instance, K £ [G]. We will need | Algorithm 5.1| a recursive algorithm that 
generates the LC orbit of a given graph. The package nauty, described in 
Iscction 3~2l is used to implement the procedure NautyCanonise(G), which 
returns a canonical representative of the graph G. Every isomorphic graph has 
the same canonical representative. In our algorithms, we will also require data 
structures for storage of graphs. Let T be such a data structure. The exact 
implementation of T may vary, but we assume that there is a procedure Add(T, 
G) that causes the graph G to be added to T. 

Example 5.8. As an example, we will generate £4, the set of all LC orbits 
on 4 vertices. There are 2w = 64 undirected simple graphs on 4 vertices, 
but the number of non-isomorphic connected graphs is only \Gi\ — 6. We use 
|Algorithm 5.1| on these graphs and find that there are \C^\ — 2 distinct LC 
orbits on 4 vertices. The orbits, £4 = {-Li, L2}, are shown in |Figure 5.2| 

We would like to partition Gn into a set of LC orbits, C n , for n as high as 
possible. In particular, we want to count the number of LC orbits, \C n \, which is 
also the number of inequivalent self-dual additive codes over GF(4) of length n. 
If we can also find one representative of each LC orbit, we can characterise the 
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Algorithm 5.1 Generating the LC Orbit of a Graph 
Input G: a graph, G = {V, E) 

Output L: data structure containing all graphs in [G] 

procedure GenerateOrbit(G) 
initialise L 

RecursiveGenerateOrbit(G, L) 
return L 
end procedure 

procedure RecursiveGenerateOrbit(G, L) 
if G L then 

for all v <E V do 

K <— NautyCanonise(G") 
Add(L, K) 

RecursiveGenerateOrbit(.Fí, L) 
end for 
end if 
end procedure 



-M 

Figure 5.2: The Two LC Orbits forn = 4 

properties of all such codes. Self-dual additive codes over GF(4) of length n have 
previously been enumerated by Calderbank et al. 01 for n < 5, by Hòhn 
for n < 7, by Hein et al. |13 for n < 7, and by Glynn et al. [2j~for n < 9. Glynn 
has also posted his results as sequence A090899 in The On-Line Encyclopedia 
of Integer Sequences |5fíl |. For higher n, only partial classifications of extremal 
codes have been performed {4| |20| J21J . 

|Algorithm 5.2| our first attempt at an algorithm for generating all LC orbits, 
is inspired by the concept of canonical representatives, as used by nauty. We 
define a procedure LCcanonise, which returns the same canonical representa- 
tive for every member of the same LC orbit. The procedure FindOrbitsI with 
Q n as input will canonise every graph in Q n and remove all duplicates in the 
resulting set. We would then have one representative of every LC orbit in C n . 
Generating the set Q n can be done by the utility geng from the nauty package. 
It is not important how the canonical representative of an LC orbit is chosen, 
as long as it is done consistently. |Algorithm 5.2| gives an implementation of 
LCcanonise(G) that first generates the complete orbit L = [G]. The proce- 
dure First(L) then picks the "first" graph in the set L by some lexicographical 
ordering. The exact implementation of this ordering is not important. 

Finding all LC orbits in C n by | Algorithm 5.2| is clearly not efficient. We 
are doing much redundant work by going through the whole LC orbit of every 





42 



5.2 Enumerating LC Orbits 



Table 5.1: Sizes of Different Sets of Graphs 



n 


\Qn\ 


13.1 


\£n\ 
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1 
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21 
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48 
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228 
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11,117 


3,302 


1,338 


9 


261,080 


25,755 


11,309 


10 


11,716,571 


224,840 


123,899 


11 


1,006,700,565 


3,204,036 


2,138,482 


12 


164,059,830,476 


82,815,479 


66,150,188 


13 


50,335,907,869,219 


5,217,308,460 


? 



graph in Q n , since many orbits will then be generated several times. A great 
improvement in running time is achieved by storing all LC orbits in memory at 
the same time. |Algorithm 5.3| guarantees that all distinct LC orbits will only be 
generated once, at the cost of extra memory requirement. The procedure will 
store all members of every LC orbit it generates in the temporary set T . If a 
graph is already in T, its orbit is not generated again. If we call the procedure 
FindOrbits2 with Q n as input, T will contain all graphs in Q n at the time the 
procedure terminatcs. 

A straightforward implementation of |Algorithm 5.3] will work when n < 8. 

The total number of undirected graphs on 8 vertices is 2^ 2 ' = 268,435,456. 
Since we have more than 300 MB of memory available, we can simply make T 
a binary array with one bit representing each graph. All bits are initialised to 
zero, and will be set to one once the corresponding graph has been discovered. 
This is clearly a waste of memory, since all the graphs we need to store are 
the \Gs\ — 11,117 non-isomorphic connected graphs on 8 vertices. When n = 9, 
such an array would require about 10 GB of memory, so a more clever approach 
is needed. We therefore use a binary search tree as T. Every time we discover a 
graph not isomorphic to any graph in T, we add a new node to the tree. Since 
our graphs are undirected, only the lower or upper triangle of the adjacency 
matrix needs to be stored. This means that bits of memory are needed 
to store each graph. These bits are easily interpreted as a numerical value for 
comparisons in the binary search tree. With this method, only non-isomorphic 
graphs will be stored in T, so the memory requirement is proportional to \G n \- 
Vàlues of \Q n \ are listed in ITable 5.11 and is also sequence A001349 in The 
On-Line Encyclopedia of Integer Sequences |56j | . 

While the orbits for n = 9 are easily computed with the binary search tree 
implementation of |Algorithm 5.3l n = 10 takes about one hour of running time 
and uses more than 100 MB of memory. The memory requirement is the biggest 
obstacle, and for n = 11 it becomes infeasible. To solve this problem, we tried 
to find an invariant, i.e., some property that has the same value for all graphs 
in the same LC orbit, and that can be calculated quickly. One such property is 
the weight distribution of the codes corresponding to the graphs, since we can 
with certainty say that two codes with different weight distributions are not in 
the same LC orbit. (The converse is however not true, since many LC orbits will 
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Algorithm 5.2 Finding LC Orbits By Canonisation 
Input F: a set of graphs 

Output O: a set with one representative of each LC orbit present in F 

procedure FiNDORBrTSl(-F) 
initialisc O 
for all G e F do 

K <— LCcanonise(G) 
if K O then 
add(0, K) 
end if 
end for 
return O 
end procedure 

procedure LCcanonise(G) 
L <— GenerateOrbit(G) 

K <- FlRST(i) 

return K 
end procedure 



Algorithm 5.3 Finding LC Orbits Quickly 
Input F: a set of graphs 

Output O: a set with one representative of each LC orbit present in F 

procedure FindOrbits2(í 1 ) 
initialise O and T 
for all G e F do 

K <— NautyCanonise(G) 
if K T then 
add(0, K) 

L <— GenerateOrbit(íí') 
for all / G L do 

add(T, I) 
end for 
end if 
end for 
return O 
end procedure 
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have exactly the same weight distribution.) To reduce the memory requirement 
of our algorithm, we calculate the weight distribution of the codes correspond- 
ing to graphs in Q n and store the graphs in k different sets, Fi, F 2 , . . . , F&, with 
the only restriction that codes with the same weight distribution must be in the 
same set. We do not necessarily have to compute the complete weight distribu- 
tions, sincc the partial weight distribution w p , i.e., the numbers of codewords 
of weights up to p, is also an invariant over the LC orbit. w p can be calculated 
efhciently by the method described in | Algorithm 3 . 2| on page 25. We choose a 
p that is high enough to give a good separation of the codes, while still being 
computable for all graphs in Q n in reasonable time. The distribution of codes 
will not be uniform, so the resulting sets will be of various sizes. When the 
sets Fi, F 2 , . . . , Ffc are generated, we call the procedure FindOrbits2 k times, 
once with each set as input. The sets are processed independently, and the data 
structure T in procedure FindOrbits2 can be reset for each set, reducing the 
amount of memory needed. This method also allows us to process the k sets 
in parallel. The outputs returned by the k procedure calls are concatenated 
to form a complete set of representatives of C n . This approach was used to 
classify all inequivalent [[11,0, d]] codes. Generating all non-isomorphic graphs 
and splitting them into 1,000 files according to partial weight distribution took 
about 3 days on an ordinary desktop computer. Many of the resulting files were 
empty or nearly empty, whereas the largest were sever al 100 MB. The total size 
of all the files after compression was about 6 GB. The processing of the files 
was done in parallel on a cluster computer in a matter of hours, and 40,457 
inequivalent codes were found. Processing the largest file required more than 
1 GB of memory, so using this method for n = 12 was not feasible with the 
available resources. 

We have seen that the procedure FindOrbitsI is too slow, and that the pro- 
cedure FindOrbits2 requires too much memory. In |Algorithm 5.4] we define 
FindOrbits3 which, like FindOrbitsI, only stores a single LC orbit in mem- 
ory at any time. It does not, however, generate the LC orbit of every graph 
in the input set, and is therefore faster than FindOrbitsI. FindOrbits3 
also benefits from splitting up the input set using partial weight distribution. 
|Algorithm 5.4| uses the procedure Remove(T, G) which removes the graph 
G from T, and the procedure RemoveNext(T), which removes some graph 
from T and returns it. The order in which graphs are removed from T is not 
important here. 

Definition 5.9. The 2™ — 1 extensions of a graph on n vertices is formed by 
adding a new vèrtex and joining it to all possible combinations of at least one of 
the old vertices. The set £' n , containing x (2 n_1 — l) graphs, is formed 

by making all possible extensions of one representative from each LC orbit in 
Let £ n contain the same graphs as £' n , except that all isomorphisms are 
removed. 

Proposition 5.10 (Glynn et al. |23j). The set £' n will contain at least one 
representative from each LC orbit in C n . 

Proof. Let G = (V, E) be any graph on n vertices. Choose any subset W C V 
of n — 1 vertices. By doing LC operations on vertices in W, we can transform 
the subgraph G(W) into any member of the LC orbit [G(14 7 )]. One of these 
members was extended when the set £' n was constructed. It follows that for all 
G € Q n , some G' G [G] must be part of £' n . □ 

ITablc 5.T1 gives the vàlues of \£' n \ and \£ n \, which are much smaller than the 
vàlues of \Q n \. It will therefore be more efficient to use £ n instead of Q n as input 
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Algorithm 5.4 Finding LC Orbits Quickly Using Less Memory 
Input F : a set of graphs 

Output O: a set with one representative of each LC orbit present in F 

procedure FindOrbits3(F) 
initialise O 

while F is not empty do 
G <— RemoveNext(.F) 
K <— NautyCanonise(G) 
add(0, K) 

L «— GenerateOrbit(.K') 
for all I e F do 
if I e L then 

remove(F, I) 
end if 
end for 
end while 
return O 
end procedure 



to our algorithms, and, by |Proposition 5.10| we will still find one representative 
of every LC orbit in £ n . We managed to find all inequivalent self-dual quantum 
codes of length n = 12 by using the set £12 as input to FindOrbits3. The 
set of 66,150,188 graphs in £12 was first divided into 1,000 files by the partial 
wcight distribution 107, a process that took a few hours. The files were then 
processed in parallel on a cluster computer. A hash table was used as the data 
structure L in the algorithm, to allow for fast look-up. The processing took a 
little morc than a weck to finish, using a total of more than 4,000 CPU-hours, 
and 1,274,068 LC orbits were found. 

ITable 5721 shows the value of \C n \, which is also the number of inequivalent 
self-dual additive codes over GF(4), for n up to 12. A database of orbit repre- 
sentatives with information about orbit size, distance, and weight distribution 
is also available . The numbers of inequivalent codes have been added to se- 
quence A090899 in The On-Line Encyclopedia of Integer Sequences j5|| , which 
previously only had vàlues for n up to 9. The numbers of codes of various dis- 
tances are shown in ITable 5.31 ITable 5 .41 ei ves the number of self-dual quantum 
codes of type II, i.e., codes where all codewords have even weight. 

Definition 5.11. Let "a", where a € N, denote a connected graph on a vertices. 
Let "a^aj 2 • • ■ a b k k '\ where ai 7 bi € N, denote an unconnected graph composed 
of òo connected components with ao vertices, b\ connected components with a\ 
vertices, and so on. 

Recali that C n only contains LC orbits of connected graphs. Codes corre- 
sponding to connected graphs are called indecomposable. Let the set C' n C C n 
also include all LC orbits of unconnected graphs. An unconnected graph on 
n vertices is composed of a set of connected components with less than n ver- 
tices. Likewise, codes corresponding to unconnected graphs, called decompos- 
able codes, can always be expressed as a combination of indecomposable codes 
of shorter length. ITable 5.5l which is an extended version of a table given by 
Glynn et al. [23j, counts the number of non-isomorphic graphs for all possible 
such combinations. The vàlues of \C n \ for n up to 12 are also shown in ITable 5.21 
and is a new sequence, A094927, in The On-Line Encyclopedia of Integer Se- 
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Table 5.2: Number of Self-Dual Quantum Codes of Length n 
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Table 5.3: Number of Indecomposable Self-Dual Quantum Codes of Length n and 
Distance d 
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Table 5.4: Number of Indecomposable Type II Self-Dual Quantum Codes of Length n 
and Distance d 
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quences (56(. Note that the number of non-isomorphic graphs of type "4 2 " is 
only 3, and not 4. Likewise, the number of "5 2 " graphs is 10, the number of "4 3 " 
graphs is 4, and the number of "6 2 " graphs is 66. For all other combinations 
used in ITable 5.51 the number of non-isomorphic unconnected graphs is simply 
found by multiplying the numbers of non-isomorphic connected graphs for each 
connccted component, e.g., the number of "641 2 " graphs is 11 x 2 x 1 x 1 = 22. 

Example 5.12. We will count the number of LC orbits in C\. The unconnected 
graphs of type "2 2 ", i.e., graphs formed by combining 2 connected graphs on 2 
vertices, must be included. There is only one orbit in £2, and therefore only 
one inequivalent decomposable code of type "2 2 ". Another way to construct 
unconnected graphs on 4 vertices is to combine a connected graph on 3 vertices 
with an isolated vèrtex. This combination is denoted "31". Since £3 = C\ = 1, 
there is only one LC orbit of type "31". The other combinations that make 
unconnected graphs on 4 vertices, "21 2 " and "l 4 ", also give one orbit each. C 4 
also contains the 2 orbits of connected graphs in £4. (This combination is 
simply denoted "4".) Thus, when we add all the combinations, \£' 4 \ = 6. 



5.3 The LC Orbits of Some Strong Codes 

In |chapter"4| we studied graph codes with circulant generator matrices. For 
some lengths we found that the best circulant graph codes had lower distance 
than the best known self-dual quantum codes. In particular, we did not find 
any [[11,0,5]], [[18,0,8]], [[21,0,8]] or [[27,0,9]] codes. Generator matrices for 
the best known quantum codes are listed by Grassl |2fij |. We have transformed 
some of these codes into graph codes and generated their LC orbits. 

Remark. There are no regular graphs corresponding to [[11,0,5]] or [[18,0,8]] 
quantum codes. 

The unique [[11,0,5]] code is already known from our complete classification 
of all self-dual quantum codes of length up to 12. This code has 4,742 non- 
isomorphic graphs in its LC orbit, and none of these graphs are regular. The 
[[18,0,8]] code has been shown (under some constraints) to be unique £|, and 
it can be generated as shown in lscction 3.51 There is no regular graph among 
the 3,828 non-isomorphic graphs in the LC orbit of this code, but the graph 
representation with the fewest edges contains only one vèrtex of degree 9, with 
the rest of the vertices having degree 7. This is the closest to minimum regular 
vèrtex degree we can get without achieving it, since the code is of type II, and 
all its graph representations must therefore have only odd vèrtex degrees. We 
also generate the LC orbit of the [[21,0,8]] code listed by Grassl j2g. It has 
77,394 members in its LC orbit, and again no regular graph is found. Note that 
neither did Gulliver and Kim 29] find any [[21, 0, 8]] code with a circulant based 
generator matrix. We also tried to generate the LC orbit of a [[27, 0, 9]] code, 
but after finding about 10 million non-isomorphic graphs, the memory resources 
of the computer were exhausted. None of the graphs found were regular. The 
[[30, 0, 12]] code we discovered in our search of circulant graph codes had a 
regular vèrtex degree of 17. We could only generate about 10 million members 
of its LC orbit, but this sufhced to find a graph with regular vèrtex degree 
15. This graph can not be described as a nested regular graph, however, and 
the degree is still far from the minimal 11. The graph representation with the 
fewest edges found had 171 edges, an "average vèrtex degree" of 11.4. 

In Isection 3.51 we showed how the [[30,0,12]] code can be constructed as a 
bordered quadratic residue code. The graph corresponding to the [[29,0,11]] 
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Table 5.5: Numbers of Decomposable Self-Dual Quantum Codes 
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5 Orbits of Self-Dual Quantum Codes 

quadratic residue code will have a regular vèrtex degree of 14. Bordering this 
code adds a vèrtex of degree 29 and increases the degree of all other vertices 
to 15. It turns out that, by using only a single LC operation, this graph can 
be transformed into one with regular vèrtex degree 15. Furthermore, this LC 
operation may be performed on any vèrtex, except the vèrtex of degree 29. The 
"wheel graph" representation of the [[6, 0, 4]] Hexacode, as shown in |Figure 3.2b| 
on page 22, is also a bordered quadratic residue code, and is also turned into 
a regular graph by a single LC operation on any vèrtex except the "centre" of 
the "wheel". 

Theorem 5.13. Let G = (V = {vq,Vi, . . . ,v m -i}, E), be a Paley graph on 
m = 4í + 1 vertices. Form the graph K = (V U {v rn }, E U {{u, v m } \ u G V}), 
i.e., add a vèrtex v m and connect it to all existing vertices. K is a graph where 
the vertices u G V have degree 2Í+1 and vèrtex v m has degree 4Í+1. K u , where 
local complementation is performed on any vèrtex u G V , will be a2t-\- 1-regular 
graph. 

Proof. The neighbourhood of u is N u = v m U A^, where N' u consists of 2t 
vertices. Since the vèrtex v m has degree At + 1 in K and degree 2t in K(N U ), its 
degree in K u will be 2t + 1. Since G is a Paley graph, and therefore a strongly 
regular graph with parameters (4í + 1, 2t, t — 1, i), any vèrtex w G N' u will have 
t— 1 ncighbours in N' u . Since w is also connected to v m in K, it is connected to 
t of the 2t vertices in K{N U ). The degree of w in K(N U ) will therefore remain 
t, and thus its degree in K u will remain 2t + 1. □ 

Corollary 5.14. The graph corresponding to a bordered quadratic residue code 
of length n can be transformed into an ^-regular graph by a single LC operation 
on any vèrtex, except the one added by the bordering. 

Note that ITheorem 5.131 holds for Paley graphs over both prime and non- 
prime fields, and could also be extended to other strongly regular graphs. The 
result does, however, not hold for the [[18, 0, 8]] code constructed by a techniquc 
similar to bordered quadratic residue, since it does not contain a strongly regular 
graph on 17 vertices. Even though quadratic residue and bordered quadratic 
residue codes achieve high distance and have regular graph representations, 
their vèrtex degree of n/2 is far from optimal for high n. 
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Chapter 

Quantum Codes and Boolean Functions 

6.1 Introduction to Boolean Functions 

A Boolean function of n variables is a function / : Z2 — > Z2 . There are 2" vec- 
tors x = (xq, Xi, . . . , x n —i) £ Z 2 l , and each x can be interpreted as an integer 
2 n ~ 1 x n -i + ■ ■ - + 2x% +xq £ 7Li n . If we cvaluate f(x) for each x £ 1"% m increas- 
ing order of the corresponding integers, we get a column vector í, known as the 
truth table of f. A Boolean function can also be represented by the algebraic 
normal form (ANF) which is a sum of monomials of n variables. Let the 2 n 
monomials of n variables be ordered 1, xq, x\, xqXi, X2, xqX2, ■ ■ • , xqX\ • • • x n —x, 
i.e., monomial number k = 2™~ 1 fc„_i + • ■ • + 2k\ + fco is — Yik =1 x i- Note 
that we will sometimes use an abbreviated ANF notation for some many-term 
Boolean functions, e.g., 012, 12, is short for xqX\X2 + x\Xi + xo. The ANF of 
a Boolean function may be represented by the column vector a with 2™ binary 
cocfBcients, such that f(x) = 53iez 2 ™ a i x ■ To transform an ANF representa- 
tion of a Boolean function into a truth table, we could perform 2™ evaluations 
of the function, but there is a more efncient method. This mcthod also cnables 
us to do the reverse transformation from truth table to ANF. The algebraic 
normal form transformation (ANFT) can be expressed as a multiplication of 
the vector t or a by a 2" x 2" matrix A n , such that A n t = a and A n a = t. 

Definition 6.1. The algebraic normal form transformation (ANFT) can be 
performed using the matrix A n , which can be decomposed as an n-fold tensor 
product, 

An = ®(\ °X (6.1) 

The straight-forward way to perform ANFT is to generate the 2™ x 2™ matrix 
A n and then calculate the product A n t or A n a. This operation has complexity 
0(N 2 ), where N = 2™. A much more efhcient algorithm, with complexity 
O(NlogN), can be used for any transformation T that can be decomposed 
into 2x2 matrices, T = T Q <g) Ti <g> • • • <E> T n _i, where 



Ti — ,(1,0) • (6-2) 




|Algorithm 6.1| is a simple version of this efficient algorithm. Different opti- 
misation techniques, as described by Fuller et al. |l9| . can give faster imple- 
mentations, but with the same order of complexity. |Figure 6~T] illustrates the 
iterations of the algorithm. 
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Algorithm 6.1 Algorithm for Tcnsor-Decomposable Transformations 

Input n: an integer 

x: a vector of lcngth 2™ 

{T , Ti, . . . , T„_i}: n 2 x 2 matrices, decomposition of T 
Output y: the vector Tx 

procedure Transform (n, x, {T ,Ti, . . . , T„_i}) 
for í <— to n — 1 do 
for j <- to 2" - 1 do 

if ((j 3> i) mod 2) = then > "^> i" means i right bit shifts 

+(".0) ,(0,1) 

else 

v .^ f (ifi) ,(i,i) 

end if 
end for 

for j <- to 2 n - 1 do 

x j ^~ Vi 
end for 

end for 

return y 

end procedure 




Figure 6.1: Iterations of Algorithm for Tensor-Decomposable Transformations 
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6.1 Introduction to Boolean Functions 



The degree of a Boolean function is the degree of the highest order term in 
its algebraic normal form. A function of degree 2 is called a quadratic function, 
and corresponds to an undirected graph. Functions of higher degree corre- 
spond to undirected hypergraphs. We will only consider simple graphs, i.e., 
graphs with no self-loops, as we will later see that linear and constant terms 
in Boolean functions can be ignored for our applications. The Boolean func- 
tion f(x) of n variables, xq,X\, . . . ,x n -\, corresponds to a hypergraph on n 
vertices, vq,V\,. .. , v n -\, where the edge {ví 1 ,Ví 2 , . . . ,Vi k } <E E iff the mono- 
mial Xí 1 Xí 2 ■ ■ ■ Xi k occurs in the algebraic normal form of /. In particular, the 
quadratic function / can be represented by the adjacency matrix T, where 
Tíj = Tj^i = 1 if XiXj occurs in /, and Tij — Tj^ — otherwise. Local com- 
plementation on a graph can then be described in terms of the corresponding 
quadratic Boolean function. 

Definition 6.2. Let / be a quadratic Boolean function corresponding to the 
graph G = (V, E). Let x a be a variable of / corresponding to the vèrtex v a e V. 
An LC operation on the variable x a produces the function 

f'(x) = f(x) + x ^ (mod 2), (6.3) 

Vj,v k £N Va 
j<k 

where N Va comprises the neighbours of v a in G. 

Definition 6.3. The Walsh-Hadamard transform (WHT) of a function / : 
— > K is given by the function / : R defined as 

7(6) = 2-i ^ f( x ). (-!)*>■*, (6.4) 

where b ■ x = boXo + b\X\ + • • • + b n -\x n -\ (mod 2). WHT can be performcd 
using the transformation matrix H n , defined by the n-fold tensor product 




The WHT of a function can be calculated by |Algorithm 6.1| Reverse WHT 
is performed by the same transformation, since H n = H^ 1 . 

Definition 6.4. Sometimes we prefer to work with the bipolar reprès entation, 
Xf ■ %2 ~^ { — 1, 1}, of a Boolean function /. We therefore define 

Xf(x) = (-lY^. (6.6) 

Definition 6.5. The WHT of Xf is known as the Walsh spectrum of /, and is 
given by the function 

Xf{b) = 2-9 Xf{x) ■ (-l) b - x = 2-9 {-l) í{x)+b - x . (6.7) 

Note that the addition in the exponent of — 1 in (|6.7() is modulo 2, and that 
all additions of binary vàlues will be modulo 2, unless otherwise stated. 

Theorem 6.6 (Parseval's Theorem). For any function, f : Z£ — > R, the fol- 
lowing relationship holds 

E / 2 ( fe )= E f 2 ^- ( 6 - 8 ) 
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Deflnition 6.7. The correlation of two Boolean functions, / and g, is 

*(f,9) = E Xf(x) ■ Xg (x) = E (-l) f(x)+9{x) - (6.9) 

The Hamming distance between / and g, d(f,g), which is the number of 
positions where their truth tables have diffcrcnt vàlues, can be derived from 
their correlation, since 

d(f,g) = 2 n - 1 -^l. (6.10) 

High positive correlation of two functions implies that the distance between 
them is low, and therefore that they closely resemble each other, i.e., that they 
will often give the same output for the same input. It is easy to verify that 
K (/> 9) = — K (/i 5+l)i so if / nas high negative correlation with g, it will have 
cqually high positive correlation with g + 1, the complement of g. 

Definition 6.8. The periòdic autocorrelation of the Boolean function / is given 
by the function r : Z£ — > R dcfincd as 

r{a) = E Xf(x) ■ Xf(x + o) = E (-l) /(a:)+/(a!+o) , (6.11) 

where x + a = (xq + ao, x\ + ai, . . . , x n -\ + a„_i). 

The autocorrelation coemcient r(a), for some a € , is the correlation of the 
functions /(a;) and f(x + a). The periòdic autocorrelation function therefore 
gives the correlation of a function and all its periòdic shifts, i.e., all possible 
combinations of variable inversions. 

Theorem 6.9 (The Wicncr-Khintchine Thcorcm). The periòdic autocorrela- 
tion and the Walsh spectrum of the Boolean function f are related, since 

r(a)-2ïÍf 2 (a). (6.12) 
Example 6.10. Consider the graph shown bclow. 




The graph has edges E = {{0, 1}, {0, 2}, {1, 2}} and corresponds to the Boolean 
function f(x) = xqXi + xqX2 + X\x<i. The truth table and ANF of / is given 
by the following table, and so are the truth tables of /, \f an d Xf- The table 
also gives the periòdic autocorrelation, r, of /. 
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6.2 Propagation Criteria for Boolean Functions 

6.2 Propagation Criteria for Boolean Functions 

Definition 6.11. A Boolean function, /, is balanced if the Hamming weight of 
its truth table is 2 n_1 , or, equivalently, if 

5^(_l)/(«)=0. (6.13) 

Definition 6.12. The bipolar truth tables, \f an d Xgi °f the Boolean functions 
/ and g are orthogonal vectors if 

J2 Xf(x) ■ Xg (x) = {-l) f{x)+9{x) = 0, (6.14) 

which implies that the correlation k(/, g) — and that f(x) + g(x) is a balanced 
function. 

Definition 6.13. A linear Boolean function is a function of degree less than 
two that can be written x ■ b for some í) € ZJ. The set of affine functions 
consists of the linear functions and their complements, i.e., functions of the 
form x ■ b + c, where b £ and c € Z2 . 

Boolean functions have important applications in cryptography. Mappings 
from n bits to k bits, known as S-boxes, are important components in block 
ciphers. Such mappings can be viewed as k mappings from n bits to 1 bit, which 
can each be expressed as a Boolean function. These functions, and all their 
linear combinations, must satisfy certain criteria for the ciphcr to be secure. 
Common requirements are high algebraic degree and that the functions are 
balanced. We also want functions with a high degree of nonlinearity, which 
means that no affine functions closely resemble them, since the cipher could 
othcrwise have been approximated by affine functions in an attack known as 
linear cryptanalysis. The nonlinearity of the Boolean function / can be derived 
from the Walsh spectrum x}, since 

2Ïx/(6) = k(/(x),6·x), (6.15) 

i.e., the Walsh spectrum gives the correlation of / with all possible linear func- 
tions, x ■ b for all be Z£ . The coefficicnt of the Walsh spectrum with highest 
magnitude corresponds to the affine function closest to /. 

Definition 6.14. A Boolean function is correlation immune of order m if 
X/(6) =0 for all 6 where 1 < wji(b) < m. If the function is also balanced, i.e., 
X/(b) = for all 6 where < Wjj(b) < m, then it is called m-resilient. The 
function obtained by fixing the value of m or fewer variables of an m-resilient 
function will still be a balanced function. 

Boolean functions are also critical components in stream ciphers, where they 
can be used to represent nonlinear combiners. In this context, the correlation 
immunity or resilience of a Boolean function is important, since they give the 
number of linear feedback shift registers required to realise a correlation attack 
on the stream cipher. 

Definition 6.15. A vector s of length 2" is flat if |sj| = \sj\ for all i, j S Z2«, 
where Sk denotes the fcth coordinate of s. 

It follows from lThcorcm 6.6l that 

E Xf 2 {b)= J2 Xf(x) = 2 n . (6.16) 
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If the Walsh spectrum of a Boolean function is flat, all coeficients of the Walsh 
spectrum must therefore be 1 or — 1. Such functions have the highest possible 
minimum distance to any affine function. 

Definition 6.16. A Boolean function with a flat Walsh spectrum is called 
perfect nonlinear or bent. 

A vector of length 2 n with entries 1 and —1 is the bipolar truth table of 
a Boolean function. The Walsh spectrum of a bent function therefore gives 
its dual function, which will also be bent. It follows from ITheorem 6~9l that 
the condition for a function to be bent can also be expressed in terms of the 
periòdic autocorrelation. The function / is bent if r(a) = for all a where 
1 < wh{ci) < n, which means that the bipolar truth tables of f(x) and f(x + a) 
must be orthogonal vectors. It can be shown that only Boolean functions of 
an even number of variables can be bent, and that bent functions can never be 
balanced. In general, it is not possible to optimise all desired properties of a 
Boolean function, so some compromise must be made. As a generalisation of 
the bent criterion, the propagation criterion of Boolean functions was defined 
by Preneel et al. and later studied by Carlet [121 ]. 

Definition 6.17. A Boolean function satisfies PC(Z), the propagation criterion 
of degree Z, if r(a) = for all a where 1 < wh{cl) < l. 

Bent functions satisfy PC(n), but functions satisfying PC(Z) for l < n can in 
addition be balanced and are therefore better suited for cryptographic purposes. 
Boolean functions used in cryptography should also have good properties when 
subsets of their variables are set to fixed vàlues. 

Definition 6.18. The Boolean function / satisfies the propagation criterion of 
degree l and order m if any function obtained by setting m or fewer variables 
of / to any fixed vàlues satisfies PC(Z). It is required that the set of fixed bits 
and the set of modified bits are disjoint, and therefore that l + m < n. 

A function satisfying PC(Z) of order m is resistant against attacks where 
the attacker knows the value of up to m input bits for a large number of plain- 
text/ciphertext pairs. The attacker is further able to modify up to l of the other 
input bits and compare the modified output with the original. This techniquc 
is known as differential cryptanalysis. In a more general scenario, the sets of m 
known bits and / modified bits need not be disjoint. Preneel et al. |Ü| define the 
extended propagation criterion, where this restriction is removed. Carlet |l2j ] 
reformulated this criterion as follows. 

Proposition 6.19 (Carlet 12]). The Boolean function f satisfies EPC(Z) of 
order m, the extended propagation criterion of degree l and order m, if f(x) + 
f(x + a) is m-resilient for any a where 1 < wu(a) < Z. An equivalent require- 
ment is that 



or that the bipolar truth tables of f(x) and f(x + a) + 6 • x must be orthogonal, 
for any a and b where wh{<i) < Z, wu{b) < m, and wh(o) and wn(b) are not 
both zero. The same criterion can be used for PC, if we add the restriction that 
a and b have disjoint supports, i.e., that they never both have the value 1 in the 
same coordinate. 

Definition 6.20. Given two vectors u, v G 1% > we sa Y that u is covered by v, 
denoted u < v, if itj < Vi for all i E 7L n . We define the negation of ti £ 




(6.17) 
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as ü = (uq + 1, ui + 1, . . . , U n -i + 1). Given a vector u G Zj, let V u Ç be 
the set 14 = {« e | ti ^ «}. Given a vector u € Z£ and a subset ^ Ç ZJ, 
it + ^ = {'U + V} is a coseí of V. 

Definition 6.21. Let the fixed-periodic autocorrelation of a Boolean function 
/ be defined as 

r(a,n,k)= (-l) /( * )+/(x+a) , (6.18) 

x£k+Vp: 

where fe ^ /x and a <Jï. The vector /i indicates a subset of the variables of / 
which are fixed to the vàlues given by fe, while the vector a indicates a subset 
of the remaining variables which are periodically shifted (flipped). 

Proposition 6.22. It can be shown that a Boolean function satisfies PC(l) 
of order m if r(a, /x, fe) = for all a, /x, fe € Zíí where fe ^ fj,, a ^ fi, 1 < 

Definition 6.23. Let the aperiodic autocorrelation of a Boolean function / be 
defined as 

s(a,fe)= (-l) /(x)+/(x+a) , (6.19) 

where k < a. Variables indicated by a are shifted aperiodically, and are there- 
fore assigned the fixed vàlues given by fe. 

Definition 6.24. Let the fixed- aperiodic autocorrelation of a Boolean function 
/ be defined as 

s(a, l· L,k)= {-l) f(x)+f(x+a \ (6.20) 

xek+v-p; 

where a, k ^ fj,. The vector /x indicates a subset of the variables of / which 
are fixed to the vàlues given by fe, including those that are aperiodically shifted 
as indicated by a. Let 6 = fi + a indicate the variables that are fixed but not 
shifted. The supports of 9 and a are disjoint by definition. 

Just as PC can be expressed in terms of fixed-periodic autocorrelation, as de- 
scribed in |Proposition 6.22| the fixed-aperiodic autocorrelation also corresponds 
to a propagation criterion which we call the aperiodic propagation criterion 
(APC) 

Definition 6.25. A Boolean function satisfies APC(Z) of order m, the aperiodic 
propagation criterion of degree l and order m, if s(a, fi, fe) = for all a, fi,k S 
where a, k ^ (j,, 6 = fi + a, 1 < wh{<í) < l, < wh{Q) < m, and a and 
have disjoint supports. 

In a cryptographic scenario, a Boolean function satisfying APC(Z) of order m 
is resistant against attacks where the attacker knows up to m + l of the input 
bits, and is further allowed to change up to l of these known bits. 

Definition 6.26. A Boolean function / has APC distance d if it satisfies 
APC(Z) of order m for all positive integers l and m such that l + m < d. 

Definition 6.27. We define the weight operator wh{o,, b) = wh(cl) +wu(b) — 
vüh{o. A b), where a Ab = (ao^o, oibi, . . . , a n _i6„_i). 

Proposition 6.28. It can be shown ïïfi l that the APC distance of the Boolean 
function f is equal to the smallest nonzero Wji(a,b) where 

^ 0. (6.21) 

Proposition 6.29. If the Boolean function f has APC distance d, then f(x) + 
f(x + a) must be (d — Wh(o,) — l)-resilient, for all a where Wh(o) < d. 
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6.3 Quantum Codes as Boolean Functions 



Definition 6.30. The Boolean function f(x) corresponds to the vector s = 
2-%(-iy<· x \ which can be interpreted as the probability distribution vector of 
the quantum state 



We can find the single quantum state represented by a self-dual quantum 
code once we know the Boolean function corresponding to an equivalent graph 
code. We intèrpret the Boolean function as a quantum state as described in 
IDcfinition 6.301 ÍSee Isection 2.11 for the definition of a quantum state.) The 
normalisation factor 2 _ í ensures that the sum of all probabilities is 1, but in 
many cases it can be ignored, and the bipolar truth table of / can then be 
interpreted directly as a quantum state. 

Example 6.31. The function f(x) = xox± + X0X2 + x\Xi corresponds to the 
bipolar vector s — 2~ 2 (1, 1, 1, — 1, 1, — 1, — 1, — 1) T . This is the probability dis- 
tribution vector of the quantum state \ipf) = 2~ï(|000) + |001) + |010) - |011) + 
|100) - |101) - |110) - 1 111)). 

We will only consider bipolar quantum states, i.e., states where all coefficients 
of the probability distribution vectors are either 1 or —1. Parker and Rijmen 
define the more general algebraic polar form, s = m(x)(~l) p ( x \ where the two 
Boolean functions m(x) and p{x) describes magnitude and phase, respectively. 
All vectors with coefficients from the set {—1, 0, 1} are covered by this definition. 
We will only study the case where m{x) = 1. 

The self-dual quantum codes studied in the previous chapters have all cor- 
responded to quadratic Boolean functions. A bipolar quantum state may cor- 
respond to a Boolean function of any degree, but unlike quadratic functions, 
functions of degree higher than two do not correspond to stabilizer codes or 
additive codes over GF(4). By going back to the original definition of quantum 
error correcting codes, as described in Isection 2.31 it is possible to extend the 
definition of zero-dimensional quantum codes to what might be called "hyper- 
graph codes", corresponding to non-quadratic Boolean functions. To guarantee 
that an error on a single quantum state can be detected, the errored state must 
be orthogonal to the original state. The distance of a zero-dimensional quan- 
tum code is therefore the weight of the minimum weight quantum error operator 
that gives an errored state not orthogonal to the original state. In quantum 
error correction we only need to consider the three errors described by the Pauli 
matrices a x , a z and a y , corresponding, respectively, to bit-flip, phase-flip and 
combined bit-flip and phase-flip. A Pauli error operating on the hypergraph 
state \ipt) corresponds to an operation on the corresponding Boolean function 
f(x). Let the binary vector a indicate which qubits have been bit-flipped, i.e., 
qubit number k has been bit-flipped iff = 1. These bit-flips correspond to a 
transformation on \tpf), 




(6.22) 




(6.23) 



The corresponding bit-flip operation on the Boolean function f(x) is 



/(x)-/(x + o). 



(6.24) 



58 



6.3 Quantum Codes as Boolean Functions 




Similarly, let the binary vector b indicate the qubits which have been phase- 
flipped. We get the error operation 

7«W>, (6.25) 

\b k = l b k =0 ) 

and we can express the same phase-flips in terms of a Boolean function, 

f(x)->f(x) + b>x. (6.26) 

The third error we must consider is the combined bit-flip and phasc-flip. We 
have used the dcfinition o~ y = icr x cr z , but the overall phase factor i has no sig- 
nificance and can be ignored. Neithcr is the order of the operations important, 
since a z a x = —cr x cr z , and this phase factor can also be ignored. 



17 



(fc) t<?\ /-(fe) t<?\ r(fc) 



v 



I w 60 I w IV/) (6-27) 



i a k = l a k =0 b k =0 

\b k = l 



corresponds, up to a global phase factor, to an operation on a Boolean function, 

f(x)^> f(x + a) + b-x + b-a. (6.28) 

The linear term ò • a can safely be ignored, because, as a and b are fixed, it 
reduces to a constant and therefore contributes another global phase factor. We 
can finally consider a general Pauli error, 



IV>/> 



<rí k) 6à (7<*> 6à <t<*> 6à I (fe) Hf) , (6.29) 



v 

\ a k = l a k =0 a k = l a k =0 

\b k =Q b k = l b k = l b k =0 



which can also be expressed in terms of a Boolean function, 

f(x) f(x + a) + b-x. (6.30) 

Note that the error operator a y , although composed of two errors, only counts 
as one error. The weight of a quantum error operator in terms of the vec- 
tors a and b is therefore given by the weight function WH(a,b), as dcfincd 
m IDcfinition 6~27l We can then define the distance of the zcro-dimensional 
quantum code corresponding to the state \ipf) as the smallest nonzero wh(o,, b) 
such that the bipolar truth tables of f(x) and f(x + a) + b ■ x are orthogo- 
nal vectors. By comparing this criterion to the definition of APC distance in 
|Proposition 6.28| we see that they are equal. 

Theorem 6.32. Let \tpf) be a bipolar quantum state with probability distribu- 
tion vector 2~~{— l)^ x \ where f is a Boolean function. Then \ipf) corresponds 
to an [[n,0,d\] quantum code where d is the APC distance of f. Conversely, 
any Boolean function with APC distance d corresponds to an [[n, 0, d]] quantum 
code. 

A Boolean function of degree higher than two corresponds to a non-quadratic 
quantum code which is not equivalent to any stabilizer code or additive code 
over GF(4). While we can quickly find the APC distance of a quadratic Boolean 
function as the distance of the corresponding additive code over GF(4) using 
|Algorithm 3.1| no such shortcut is known for higher degree functions. We must 
therefore check the condition (|6.21|l for all errors of increasing weight, until an 
error not satisfying the condition is found, as described in |Algorithm 6.2) 
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Algorithm 6.2 Finding the APC Distance of a Boolean Function 

Input /: a Boolean function 

n: the numbcr of variables of / 
Output d: the APC distance of / 

procedure FindAPCdistance(/, n) 
s <— Xf, the bipolar truth table of f(x) 

for all aeZJ and b 6 Z£ in increasing order of wh(o,, b) do 
s' the bipolar truth table of f(x + a) + b ■ x 
if s ■ s' ^ then 

return wh(o,, b) 
end if 
end for 
end procedure 



Figure 6.2: A Hypergruph Corresponding to a [[6,0,3]] Quantum Code 

Example 6.33. The hypergraph shown in |Figure 6.2| corresponds to the cúbic 
Boolean function f(x) = 012, 03, 04, 13, 15, 24, 25. It can be verified that no 
error with Wu(a, b) < 2 satisfies Ij6.21|l . There are, however, vectors a and 
b with Wu(a, b) = 3 such that (|6.21|l is satisfied. One such error is given by 
a = (0,0,0,0,0,1) and b — (0,1,1,0,0,0), and it produces the errored state 
f(x + a) + b ■ x = 012, 03, 04, 12, 13, 15, 24, 25. We verify that f{x) + f(x + a) + 
b ■ x = x\X2 is not a balanced function. This means that the APC distance of 
/ is 3, and that / corresponds to a [[6, 0, 3]] non-quadratic quantum code. 

Note that |Proposition 4.6| does not hold for hypergraphs. Connected hy- 
pergraphs where all vertices have high degree may still correspond to Boolean 
functions with APC distance 1. 

6.4 The {/, H,N} n Transform Set 

As described in lscction 5.11 Hein et al. [Üj showed that local complementation 
on a graph corresponds to a transformation defined by the tensor product of 
the matrices t x = \/—i<J x and t z = \Jia z . The LC orbit can then be generated 
by repeated transformations of this form. 

Definition 6.34. Let T = {7\, T 2 , . . . , Tk} be a set of k 2 x 2 unitary matrices. 
The transform set T" is then the set of k n 2" x 2 n transformation matrices 
of the form U = Uq ® Ui ® • • • ® U n -i, where C/j G T. Given a vector s of 
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length 2™, the k n transforms S = Us, for all possible choices of U G T n , is a 
multispectra with (2k) n spectral points. We refer to this multispectra as the 
spectrum with respect to the T n transform. 

Definition 6.35. Let V be the infmite set of all 2 x 2 diagonal and anti-diagonal 
unitary matrices, i.e, matrices of the form 

o b) and [b 

where a, b G R. A transform F <G T> n is then a tensor product of any n matrices 
from D. 

Proposition 6.36 (Riera and Parker |5l|). Applying a transformation from 
T> n to a vector s will not change the magnitudes of the coefjïcients of s. If two 
2x2 unitary matrices, A and B, satisfy FA — B where F £ T>, they can be 
considered equivalent, A ~ B. 

Theorem 6.37 (Riera and Parker |5l|). To within a subsequent transformation 
from T> n , all members of the LC orbit of the Boolean function f can be found 
as a subset of the finite set o/3 n {I ,T x ,T x T z } n transforms of f . 

Example 6.38. For a Boolean function f(x) of n — 2 variables, we find the 
corresponding vector s — 2~%(— We then find the 9 vectors S = Us, 

for all U € {/ ® J, I ® T x , I <g) T X T Z , T x (g I, T x (g) T x , T x <g) T X T Z , T X T Z <g) /, 

t x t z (8 1 t x , t x t z <X) t x t z }. By using appropriate transformations from T> n , some 
of the vectors S may be transformed into bipolar vectors which correspond to 
truth tables of Boolean functions. We use ANFT to recover all such functions, 
and this set will comprise all members of the LC orbit of /. 

Definition 6.39. Let 

where i 2 = —1, be the Identity, Hadamard, and Negahadamard transformations, 
respectively. 

Let / be a Boolean function on n variables and s = 2~t (— l)^( x ) be a vector 
of length 2 n . The spectrum with respect to the {/, H, N} n transform is the set 
of 3" transforms S = Us, for all U € {/, H, N} n . 

Theorem 6.40 (Riera and Parker |51|). It can be shown that N ~ t x and 
H ~ t x t z . It follows that the LC orbit of a Boolean function can be generated 
by the transform set {I, H, N} n . 

There is a good reason for choosing the transform set {/, H, N} n instead if 
{/, t x , T x r z } n . We have already seen that the Hadamard transformation is used 
in both the theory of quantum computing and in the analysis of Boolean func- 
tions. The {H} n transform, which is simply the Walsh-Hadamard transform 
as dcfincd in l|6.5|l . is an n-dimensional 2-point discrete Fourier transform. We 
know from ITheorem "OI t hat the {H} n s pect rum is the "dual" of the periòdic 
autocorrelation, defincd in IDcfinition 6.81 The {/, H} n spectrum can be shown 
to be the "dual" of the fixed-periodic autocorrelation, defined in IDcfinition 6.2Í1 
The Hadamard and Negahadamard transformations together define a two times 
oversampled discrete Fourier transform, and the {H, TV}™ spectrum is therefore 
the "dual" of the aperiodic autocorrelation, defined in IDcfinition 1T231 Finally, 
the {/, H, N} n spectrum is the "dual" of the fixed-aperiodic autocorrelation, de- 
fined in IDcfinition 6.241 which is related to the aperiodic propagation criterion, 
as shown in IDcfinition 6.251 
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Definition 6.41. Let / be a function, / : — > Z m , where m S 2N, i.e., m 

is some even positive integer. Let u = e^? , i.e., u is a complex mth root of 1. 
The vector s — u^ x ' is Boolean flat if it is flat and there exists some F € V n 
such that Fs = u"?/ ( x ) = (— 1)/ ( x ) ; where /' is a Boolean function. It follows 
that / and /' may be interpreted as equivalent functions. 

Definition 6.42. For k 6 N, we define the "Zfc-phase-flip" matrix 



Pk 



1 

e 2 ? 



Proposition 6.43. Let s = where u — e^?, / : Z£ — > ^m, and m S 2N. 

TTie vector s is Boolean flat if we can write s = utt^ W+ ll W j where f is a 
Boolean function and h is an afflne function from Zj ío Z m . 

Proof. Let s' be the transform 



where b € Z m . It can then be verified that s' = u^ x ^ +bXk . Let s" = u c s, where 
u = c^r and c 6 Z m . It can be verified that s" = u^( x ) +c . Thus all linear 
and constant terms of h(x) can be removed by a transformation F £ T> n of the 
form 

n-l 

F = u c Ç§p b r H, (6.31) 

fe=0 

where u = e~ and 6fe, c £ Z m . □ 

Proposition 6.44 (Riera and Parker VFe can perform local complemen- 

tation on the variable Xk of the Boolean function f with the transformation 

U k = NWÇ$I m . (6.32) 

l^k 

If s = 2~í (— l)f( x \ then S = UkS will be Boolean flat with coefficients from 
the set {w a | w 4 = —l,a £ Zg}. Furthermore, S can always be expressed as 
S = w 4 J B )+ 2 M a! )+ c j where f is a Boolean function, h is an afflne function 
from Zg to Z4 , and c £ Z%- 

It follows fr om|Proposition 6.43| that the vector S = U m s, where U m is of the 
form given can be turned into a bipolar vector by some transformation 

of the form 

n-l 

F = w a Ç§p\\ (6.33) 

k=a 

where w 4 = — 1, a £ Zg, and bk € Z4. We can then implement a sequence of LC 
operations by transformations U m of the form given by l|6.32|) , with appropriate 
transformations F of the form given by (|6.33() performed after each U m . 

Lemma 6.45. Define the product U = UkUk-i ■ ■ ■ U\, where k £ N and Ui £ 
{/, H, N, a x ,p 4 }. Then U = U' 3 U' 2 U[, where U[ £ {I, H, N}, U' 2 £ {I, a x }, and 
U3 = w a p\, where w 4 = —1, a £ *Zg, and b £ Z4. 
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Proof. The result follows from thc idcntities, 



HH 


= 1, 


HN 


= Pi, 




= N, 


TT _ 

üa x 


_ TT J2 TT 

= o z H = /O4J1, 


NH 


= wpl<T x N, 


NN 


= wp\H, 


N Pi 


= <J X H, 


Na x 


= -cr v N = ipl<7 x N, 


0~xPi 


= ip\(J x , 




= I. 



(6.34) 



□ 

Theorem 6.46. Given any sequence of transformations U = UkUk-i • ■ ■ U\. 
where k G N and Ui G {I , H, N,a Xl p 4 } n . Then U = U^U[, where U[ G 
{I,H,N} n , V 2 G {I,a x } n , and U' z = w a ® ^ , w/iere w 4 = —1, a G Z 8; 
anrf òfe G Z4. 

Proof. This result is a simple generalisation of ILemma 6.45l to a transformation 
on n qubits. □ 

Corollary 6.47. ^4nj/ sequence of LC operations is equivalent to a single trans- 
formation from {J, H, N} n followed by some transformation from T> n of the 
form 

F = u^(®p** )(®oA (6-35) 

\fc=0 / \l=0 ) 

where w 4 — —1, a G Zg, G Z4, emrí c; G Z2. 

Definition 6.48. A function / : ZJ — > Z m , where m G N, can be described 
by the truth table t or the algebraic normal form a, both being vectors of 
length 2™ with coefhcients from Z m . The generalised algebraic normal form 
transformation, ANFT m , can be used to transform t into a and vice versa. To 
transform a truth table into ANF, we use 




t (mod m). (6.36) 
Transformation from ANF to truth table is performed by 

í = fe (] ?Ho (mod to). (6.37) 




If s = 2"f (-l)/( x ) and 5 = C/s is flat for some choice of É7 G {I,ÍZ",iV} n , 
then we can recover the function S = w 9 ^ by using ANFTs. By separating 
the monomials of g{x) that are divisible by 4 and those that are not, we can 
write S = w 4 ^ ( as )+ íl ( !B ) ) where /' is a Boolean function, h is any function from 
Z^ to Zg, and w 4 = —1. If ft,(:c) is an affine function, it can be shown that 
the coefScients of all its linear terms must be divisible by two. We can then 
climinate h(x) by post-multiplication with a transformation F of the form given 
by (|6~33|) . and get FS = (-iy'( x \ 
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Definition 6.49. Given a Boolean function /, find the set of all Boolean flat 
{I, H. N} n transforms of /, and recover the corresponding Boolean functions. 
The set of all distinct Boolean functions recovered from the set of all {/, H, N} n 
transforms of /, including / itself, is called the {I,H,N} n orbit of /. 

Corollary 6.50. By \Theorem 6.4-ü\ if f is quadratic then the {I,H,N} n orbit 
is the LC orbit. 

Theorem 6.51. It can be shown that if two Boolean functions are in the 
same {I, H, N} n orbit, then they will have the same APC distance. 

Example 6.52. Consider the Boolean function f(x) = xqX\ + xqXi. The 
bipolar vector describing the corresponding quantum state, if we ignore the 
normalisation factor 2~5, is 

s = (-l)'*») = (1, 1, 1, -1, 1, -1, 1, 1) T . 

We apply the transformation U = N ® I ® I and get the result 

7 7 7 7 \ T 1 

S = Us = (w,w ,w ,W,w ,w,W,w ) , 

where w 4 = — 1. We observe that \Sk\ — 1 for all k, which means that S is 
flat and can be expressed as w g ( x \ where the function g : Z| — > Z§ has truth 
table (1, 7, 7, 1, 7, 1, 1, 7) T . Using ANFT 8 , as described by JOüJl, we find that 
the ANF of g is (1, 6, 6, 4, 6, 4, 4, 0) T , and we can therefore write 

ç< _ ti) 4(aoKi+xoa:2+xia:2) + (6xo+6xi+6x2+l) 

We observe that S is Boolean flat, since the terms that are not divisible by 4 
are all linear or constant. We also see that all linear terms are divisible by 2, 
which, by |Proposition 6.44| we should expect. We can eliminate all linear and 
constant terms by applying a transformation as described by (I6.33() , in this case 
we must use the transformation 

'-'(ï m; ?k ?)■ 

We get the result 

We can conclude that f(x) = xqX\ + xqX2 and f'(x) = xqX\ + xqX2 + x\X2 
are in the same {/, H, N} n orbit, and since they are quadratic functions, the 
same LC orbit. This can be verified by applying the LC operation to the vèrtex 
corresponding to the variable xq in the graph representation of either function. 

6.5 Orbits of Boolean Functions 

For quadratic Boolean functions, LC operations on the associated graphs gen- 
erate the orbits of equivalent functions. It is unknown whether there exists a 
similar operation on hypergraphs that generates the orbits of equivalent non- 
quadratic functions, but the {/, H, N} n orbit can be generated for Boolean 
functions of any degree. For non-quadratic functions, there are also other sym- 
metries that must be considered. 

We have already seen that permuting the variables of a Boolean function 
gives an equivalent function, 

f(x ,Xi, . . .,X n -i) ~ f(x„^,X„(i), . . M^TrCn-l))- (6.38) 
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Table 6.1: Number of Orbits of Boolean Functions of n Variables 



n 


Degrees 




|0 2 ,n| 


3 


All 


3 


2 


4 


All 


33 


29 


5 


All 


22,400 


22,014 


6 


< 3 


850,705 


746,326 



We can determine whether two functions are equivalent via the permutation 
symmetry by checking if their corresponding graphs are isomorphic. For non- 
quadratic functions we must check for hypergraph isomorphism. The package 
nauty can be used in both cases, as described in lsection 3.21 

Adding an affine offset to a Boolean function, i.e., adding any linear or con- 
stant terms, will not change the APC distance of the associated quantum state. 
We call this the affine symmetry, 

/(se) ~ /(se) + b- x + c, beZ£,ceZ 2 . (6.39) 

Note that the addition of linear terms corresponds to the phase-flip operation 
defined in l|6.26l) . Similarly, all bit-flips on a Boolean function will produce an 
equivalent function. This is the bit-flip symmetry, 

f(x) ~ f(x + a), aelÇ. (6.40) 

The affine symmetry may be taken into consideration by simply deleting any 
linear or constant terms from a Boolean function. We have implicitly done this 
for quadratic functions by only considering simple graphs. 

Remark. A bit-flip on a Boolean function of degree m can change the coefficients 
of terms with degree at most m — 1 . 

Bit-flips on quadratic functions can only produce linear terms, which is also 
what phase-flips do. Therefore the affine symmetry and bit-flip symmetry coin- 
cide for quadratic functions. For non-quadratic functions, bit-flips can produce 
nonlinear terms, and the bit-flip symmetry may therefore generate non-trivial 
orbits of functions. 

Definition 6.53. Let B n be the set of all non-isomorphic connected Boolean 
functions of n variables with no linear or constant terms. (Two Boolean func- 
tions are isomorphic or connected if their corresponding hypergraphs are iso- 
morphic or connected.) Given a Boolean function / € B n , then the set of all 
distinct non-isomorphic Boolean functions recovered from the set of {I,a x } n 
transforms of /, with linear and constant terms removed, is called the {7, o~ x } n 
orbit of /. B n can be partitioned into a set of disjoint {/, <r x } n orbits, called 
0i,n- |Ci,n| is then the number of inequivalent connected Boolean functions of 
n variables with respect to the permutation, affine, and bit-flip symmetries. 

We have generated all orbits in 0\^ n for n < 5. For 6 variables, we could 
only generate orbits for all functions of degree up to 3. For these vàlues of n, 
ITable 6.11 gives the number of orbits, while ITable 6 .21 and ITable 6 .41 show the 
number of orbits by APC distance and degree for n = 5 and n = 6. A database 
containing one representative of each orbit is also available [l3j . 

Orbits of non-quadratic functions with respect to {/, H, N} n can not be gen- 
erated without also considering bit-flips, since it follows from the identitics 
in (|6.34|) that a sequence of transformations from the set {/, H, N} may inducc 
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bit-flips. For instance, applying first H and then N to one variable is equiva- 
lent to performing a bit-ílip on the variable. The set M of Boolean functions 
found within the set of {/, H, N} n transforms of the non-quadratic Boolean 
function / will therefore contain some members of the {/, a x } n orbit of /. If 
/' is found in M, then {/, H, N} n transforms of /' may induce bit-flips that 
produce functions not found in M. 

Definition 6.54. Given a non-quadratic Boolean function /, it follows from 
ITheorem 6.46l that a closed orbit of functions may be generated by first finding 
the set M of all distinct Boolean functions recovered from {I, H, N} n transforms 
of /. We then generate M', containing all functions in the {I, cr x } n orbits of 
every function in M. The set of non-isomorphic functions in M', with linear 
and constant terms removed, is the {I, <j x } n {I, H, N} n orbit of /. B n can be 
partitioned into a set of disjoint {I, <j x } n {I, H, N} n orbits, called 0^ n . \0^ n \ 
is then the number of inequivalent connected Boolean functions of n variables 
with respect to the permutation, affine, bit-flip, and {/, H, N} symmetries. 

|Algorithm 6.3| can be used to generate all members of the {7, cr x } n {I, H, N} n 
orbit of the Boolean function /. It first finds all inequivalent Boolean functions 
corresponding to {I,H,N} n transforms of /, and then generates the {I,<r x } n 
orbits of all these functions. When we only want to generate the {/, a x } n orbit 
of a function, we use the same algorithm but skip the first loop. When we want 
to count the orbits in Oi, n or 02, n, or fmd a member of each orbit, we use 
an approach similar to the one used in |Algorithm 5.2] By picking a canonical 
representative of each orbit, we canonise all Boolean functions in B n and re- 
move all duplicates. This can be done much faster by using a generalisation of 
IDcfinition 5.91 i.e., by generating a set of functions of n variables by extending 
one member from each orbit of functions of n — 1 variables, and then using 
this set of functions as input to the above-mentioned canonisation algorithm. 
A function is extended by adding a variable and all combinations of monomials 
including this variable. 

We use |Algorithm 6. ï~| to find {/, H, N} n transforms or {/, <J x } n transforms of 
a Boolean function. Note that we can skip iterations of | Algorithm 6.1| where the 
identity transformation is applicd. It is possible to order any set of transforma- 
tions, T™, such that only one factor of each n- fold tensor product changes from 
one transformation to the next. By using some additional temporary transfor- 
mation matrices, it is then possible to find all T" transforms of a function by 
only using |T| n single iterations of |Algorithm 6.Í] A Gray code sequence gives 
an ordering of transformations that makes this possible. 

Definition 6.55. Given a sequence s of length n, let s' = rev(s) be the se- 
quence s in reversed order, i.e., s[ — s„_i_í. We also define s' = pre(c, s), 
where ce Z„ . If c is even, then s' consists of all elements from s with the pre- 
fix c added, e.g., pre(0, (0, 1, 2)) = (00, 01, 02). If c is odd, then s' consists of all 
elements from rev(s) with the prefix c added, e.g., pre(l, (0, 1, 2)) = (12, 11, 10). 
Let conc({si, S2, ■ ■ ■ , s m }) be the concatenation of all sequences Si to a single 
sequence. 

Definition 6.56. The n-ary Gray code sequence of order r, denoted q n r , con- 
tains all n r elements from W n . The sequence has the property that any two 
consecutive elements have the same symbol in r — 1 positions, so that only one 
symbol needs to be changed to jump from one element of q n r to the next. A 
Gray code sequence can be constructed recursively, 

qr n>1 = (0,l,...,n-l) (6.41) 

q n r = conc ({pre(c, q nir _{) \ c £ Z„}) . (6.42) 
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Example 6.57. We want to find the 9 {/, H, N} 2 transforms of some Boolean 
function / of 2 variables. We generate the Gray code sequence q 3 2 = (00, 01, 
02, 12, 11, 10, 20, 21, 22). By the mapping h-> /, 1 h-> H, and 2 h-> N, we get 
the following sequence of transformations, (I®I, I (g)H , I®N, H ®N, H ®H, 
H ® I, N ® I, N ® H, N ® N). To jump from H to N, N to ií, and TV to 
/, we need the temporary transform matrices NH^ 1 , HN -1 , and iV _1 . (Note 
that H^ 1 = H .) The sequence of transformations we will use is then (/ ® /, 
I ® H, I ® NH-\ H ® I, I ® H, I ® H, N ® I, I ® H, I ® NH^ 1 ), where 
only the first transformation is applied to the function /, and the subscquent 
transformations arc applied to the transform from the previous step, so that 
the cumulative effect gives the desired result. 

Using |A"lgorithm 6.3| we have generated all orbits in 02, n for n < 5, and 
also the orbits of functions of 6 variables with degree up to 3. For these vàlues 
of n. ITable O gives the number of orbits, while ITable 6.31 and ITable 6.51 show 
the number of orbits by APC distance and de gree . A databasc containing one 
representative of each orbit is also available 13] . The numbers of inequiva- 
lent functions are not reduced considerably when the { J, H, N} symmetry is 
considered in addition to bit-flips, but the difference in orbit size is larger for 
functions with low degree and high APC distance. Recali that for quadratic 
functions, bit-flips only generate affine offsets. For functions of high degree, 
bit-flips account for almost all symmetries. 

Remark. There are no non-quadratic functions of 5 or less variables with APC 
distance higher than 2, but there are 11 functions of 6 variables, belonging to 
different orbits in 02,6 1 with degree 3 and APC distance 3. 

A representative of each of the 11 inequivalent non-quadratic [[6,0,3]] quan- 
tum codes is listed in ITable 6.61 The first function in this table corresponds to 
the hypergraph shown in |Figurc 6.2| The table also gives examples of codes 
of higher length found by non-exhaustive searches of functions with a lim- 
ited number of non-quadratic terms, or by adding several higher degree terms 
to strong quadratic codes. The functions in ITable 6.61 all belong to different 
{J, a x } n {I, H, N} n orbits, and the representative from each orbit with fewest 
monomials is listed. The table also gives the value of PAR/ hn of each function. 
PARihn will be introduced in the next chapter. 
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Algorithm 6.3 Generating an {I, <r x } n {I, H, N} n Orbit 

Input /: a Boolean function 

n: the mimber of variables of / 
Output L: the set of all Boolean functions in the orbit of / 

procedure GenerateOrbit(/, n) 
s <— bipolar truth table of / 

for all transformations U E {/, H, N} n do > use Gray code ordering 
s' <— Us > use single iteration of |Algorithm 6.l| 

s" <— Z 8 -ANF corresponding to s' > use ANFT 8 

if s" is Boolean flat then 

/' «— Boolean function corresponding to s" 
Remove all linear and constant terms from /' 
/" <— NautyCanonise(/') > use hypergraph canonisation 

if /" ^ L then 
Add(X, f") 
end if 
end if 
end for 

for all functions g 6 L do 
s <— bipolar truth table of g 

for all transformations U E {I, u x } n do > use Gray code ordering 
s' *— Us > use single iteration of |Algorithm 6.l| 

g' «— ANF corresponding to s' 
Remove all linear and constant terms from g' 
g" <— NautyCanonise((/) > use hypergraph canonisation 

if g" & L then 
Add(X, g") 
end if 
end for 
end for 
return L 
end procedure 
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Table 6.2: Number of Orbits in 0i, 5 with APC Distance d and Degree 5 



d 






6 






2 


3 


4 


5 


All 


1 




625 


10,756 


10,688 


22,069 


2 


18 


109 


201 




328 


3 


3 








3 


All 


21 


734 


10,957 


10,688 


22,400 



Table 6.3: Number of Orbits in 02, 5 with APC Distance d and Degree 5 



d 






S 




2 


3 


4 5 


All 


1 




505 


10,570 10,688 


21,763 


2 


3 


61 


186 


250 


3 


1 






1 


All 


4 


566 


10,756 10,688 


22,014 



Table 6.4: Number of Orbits in Oi t 6 with APC Distance d and Degree 5 



6 



d 


2 


3 


4 


5 


6 


2 and 3 


1 




804,326 


? 


? 


? 


804,326 


2 


94 


46,243 


? 


? 


? 


46,337 


3 


16 


24 


? 


? 


7 


40 


4 


2 




? 


? 


7 


2 


All 


112 


850,593 


? 


? 


? 


850,705 



Table 6.5: Number of Orbits in 02,6 «fií/i APC Distance d and Degree 5 



5 



d 


2 


3 


4 


5 


6 


2 and 3 


1 




717,741 


7 


7 


7 


717,741 


2 


9 


28,563 


? 


? 


? 


28,572 


3 


1 


11 


7 


? 


? 


12 


4 


1 




? 


7 


? 


1 


All 


11 


746,315 


7 


? 


? 


746,326 
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Table 6.6: Boolean Functions of n Variables with Degree 8, APC Distance d, and 
PARihn p 



n 





u 


V 


Function 


6 


3 


3 


8 


012,03,04,13,15,24,25 


6 


3 


3 


4.5 


012,03,05,14,15,23,24,25,34 


6 


3 


3 


4.5 


023, 012, 04, 05, 13, 15, 23, 24, 25, 34 


6 


3 


3 


8 


123, 124, 125, 01, 02, 14, 25, 34, 35, 45 


6 


3 


3 


4.5 


012, 013, 03, 04, 13, 15, 24, 25, 34, 35, 45 


6 


3 


3 


4.5 


012, 013, 014, 03, 05, 14, 15, 23, 24, 25, 34 


6 


3 


3 


4.5 


012, 014, 024, 123, 134, 234, 03, 13, 15, 24, 25, 34, 45 


6 


3 


3 


8 


015, 012, 013, 014, 03, 05, 14, 15, 23, 24, 25, 34, 35, 45 


6 


3 


3 


8 


025, 245, 012, 124, 023, 234, 04, 05, 13, 15, 23, 24, 35, 45 


6 


3 


3 


4.5 


245, 235, 145, 135, 024, 023, 014, 013, 02, 05, 14, 15, 23, 34, 35, 45 


6 


3 


3 


8 


125, 145, 135, 245, 235, 012, 014, 013, 024, 023, 05, 13, 15, 24, 25, 34 


7 


3 


3 


8 


012, 03, 05, 14, 16, 25, 26, 34 


7 


3 


3 


8 


014, 02, 05, 13, 15, 26, 36, 45, 46 


7 


3 


3 


8 


014, 02, 05, 13, 16, 26, 35, 45, 46 


7 


3 


3 


8 


015,02,06,13,16,25,35,45,46 


7 


3 


3 


8 


012, 03, 06, 14, 16, 25, 26, 34, 35, 45 


7 


3 


3 


9 


012, 04, 05, 14, 16, 25, 26, 34, 35, 36 


7 


3 


3 


8 


013, 04, 06, 15, 16, 23, 26, 34, 35, 45 


7 


3 


3 


9 


013, 04, 06, 15, 16, 24, 25, 34, 35, 36 


7 


3 


3 


16 


456, 04, 05, 14, 16, 25, 26, 34, 35, 36 


7 


3 


3 


8 


024, 045, 01, 03, 12, 26, 35, 45, 46, 56 


7 


3 


3 


8 


012, 03, 06, 14, 15, 24, 25, 26, 35, 36, 46 


7 


3 


3 


9 


012, 05, 06, 13, 15, 23, 26, 34, 45, 46, 56 


7 


3 


3 


8 


012, 05, 06, 13, 15, 24, 26, 34, 35, 46, 56 


7 





o 
O 


Q 
O 


D1 fi 09 nq 1 A 1 ^ 94 9fí "í^ "ífi Afí ^fi 
U1D, UZ, UO, 14, 10, Z4, ZO, 00, 00, 40, 00 


7 
i 


Q 

o 


Q 



Q 
O 


ni 9 n'í fl^i 1 4 1 ^ 9*í 9A 9fi AP, ^p, 

U1Z, UO; UO, 14, 10, ZO, Z4, ZU, OO, 4U, OO 


7 
i 


Q 
O 


Q 
O 


Q 
O 


n*^ n9^ n9^t nfi 1 1 1 ^ ifi oa 9^ 9fi *\a *ïfi a\ 

UOO, UZO, UZO, UU. IÓ, lO, lO. Z'l. ZO. ZU. 1. OU. '10 


7 
i 


Q 
O 


Q 
ü 




o 


ni *í n9"í 1 9 1 ? m 9 c\a n^ ia ifi 9^ 9fi ia ^ 

UIO, UZO, 1ZO, U1Z, U4, UO, 14, 1U, ZO, ZO, 04, OO, OO 


7 


4 


3 


12.25 


0123, 04, 05, 14, 16, 25, 26, 34, 35, 36 


7 


4 


3 


8 


0126, 03, 05, 14, 15, 23, 24, 26, 36, 46, 56 


8 


3 


4 


16 


012, 04, 05, 07, 14, 16, 17, 25, 26, 27, 34, 35, 36 


8 


3 


4 


16 


016, 02, 03, 04, 12, 13, 15, 27, 36, 46, 47, 56, 57, 67 


8 


3 


4 


8 


067, 01, 02, 03, 14, 16, 25, 27, 36, 37, 46, 47, 56, 57 


8 


3 


4 


9 


234, 02, 03, 05, 12, 13, 14, 26, 37, 46, 47, 56, 57, 67 


8 


3 


4 


8 


024, 046, 01, 03, 05, 12, 14, 25, 27, 34, 36, 46, 47, 56, 57, 67 


8 


3 


4 


8 


127, 126, 067, 01, 02, 03, 14, 16, 25, 27, 36, 37, 46, 47, 56, 57 


8 


3 


1 


8 


456, 056, 246, 026, 245, 025, 04, 07, 15, 16, 17, 23, 26, 27, 35, 36, 45, 46, 47, 57 


8 


4 


4 


16 


0123, 04, 05, 06, 14, 15, 17, 24, 26, 27, 35, 36, 37 


8 


4 


4 


16 


0167, 02, 03, 04, 12, 13, 15, 26, 37, 46, 47, 56, 57, 67 


9 


3 


4 


8 


016, 02, 04, 07, 13. 15. 18. 23. 26. 36, 45, 47, 58, 67, 68, 78 


9 


3 


4 


9 


235, 234, 02, 04, 06, 13, 15, 16, 26, 28, 36, 37, 47, 48, 57, 58, 78 


9 


3 


4 


8 


037, 137, 034, 134, 01, 07, 08, 14, 18, 23, 25, 28, 36, 37, 45, 46, 57, 58, 67, 68 


9 


3 


1 


16 


024, 124, 047, 147, 02, 05, 08, 15, 17, 18,23,26, 34, 37, 38, 46, 47, 48, 56, 58, 67 


9 


3 


4 


16 


234, 023, 124, 012, 03, 06, 08, 14, 17, 18, 23, 24, 25, 37, 38, 46, 48, 56, 57, 58, 67 


10 


3 


4 


16 


016, 02, 03, 08, 12. 13. 17. 26. 39, 45, 46, 48, 57, 59, 67, 68, 79, 89 
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Chapter 

Peak-to-Average Power Ratio 

7.1 Peaks and Independent Sets 

Definition 7.1. The peak-to-average power ratio of the vector s with respect 
to the T" transform, for some transform set T = {Ti, T2, . . . , T m }, is dcfincd 
as 

PAR T (s) = 2" max IS/J 2 , (7.1) 
ueT" 

where S = Us. In other words, the PAR7- of s is the highest squared magnitude 
of the (2m) n coefhcients in the T n spectrum of s. 

The PAR7- of s can alternatively be expressed in terms of the generalised 
nonlínearity |37| . 

7 (/) = 2Ï- 1 (2* - VPARr («)) , (7.2) 

but we will use the PARr measure. We will in particular study PAR ^p y , the 
peak-to-average power ratio with respect to the {/, H, N} n transform |ïf|. If a 
vector, s, has a completely fiat {I,H,N} n spectrum, which is impossible pSll ]. 
then PAR /H w(s) = 1. If s = 2~% (1, 1, . . . , 1, 1) T then PAR /H w(s) = 2™. A 
typical vector, s, will have a PARj^at(s) somewhere between these extremes. 
For quadratic functions, PARihn will always be a power of 2 [H^. 

Let s = 2~í(— l)^^ x \ as before. When we talk about the PARihn of /, 
or its associated graph G, we mean PARihn(s). For cryptographic purposes, 
it is desirable to find Boolean functions with high generalised nonlinearity and 
therefore low PARihn- PARihn is an invariant of the {/, a x } n {I, H, N} n 
orbit and, for quadratic functions, the LC orbit. We observe that Boolean 
functions from LC orbits associated with self-dual additive codes over GF(4) 
with high distance typically have low PARihn- This is not surprising, since 
the distance of a self-dual quantum code is equal to the APC distance of the 
associated quadratic Boolean function, and APC is derived from the fixed- 
aperiodic autocorrelation which is, in turn, the autocorrelation "dual" of the 
spectra with respect to {I,H,N} n . ITable 7.ïl shows the value of PARihn for 
every LC orbit of codes with length n < 12. 

Definition 7.2. Let a(G) be the independence number of a graph G, i.e., the 
size of the maximum independent set in G. Let [G] be the set of all graphs in 
the LC orbit of G. We then define 

A(G) = max a(K), (7.3) 
Ke[G] 
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7 Peak-to-Average Power Ratio 

Table 7.1: Number of LC Orbits with Length n and PARihn p 



n 



p 1 


2 3 4 


5 


6 


7 


8 


9 


10 


11 


12 


2 1 


1 


















4 


1 1 


1 


1 














8 


1 


2 


5 


6 


9 


2 


1 






16 




1 


4 


14 


52 


156 


624 


3,184 


12,323 


32 






1 


5 


32 


212 


1,753 


25,018 


834,256 


64 








1 


7 


60 


639 


10,500 


380,722 


128 










1 


9 


103 


1,578 


43,013 


256 












1 


11 


163 


3,488 


512 














1 


13 


249 


1024 
















1 


16 


2048 


















1 



Table 7.2: Range o/A for Codes of Length n and Dïstance d 



d 2 



6 



7 



!) 



10 



11 



12 



2,3 



3,4 
2 



3-5 
3 
2 



3-6 
3,4 



3-7 
3,4 
3,4 



4-8 
3-5 
3,4 



4-9 
4-6 
3-5 



4-10 
4-7 
4-6 
4 



4-11 
4-8 
4-7 

4 

4 



i.e., A is the size of the maximum independent set over all graphs in the LC 
orbit of G. 

Consider as an example the Hexacode which has two non-isomorphic graphs 
in its orbit, as seen in |Figure 3.2| on page 22. It is evident that the independence 
number of each graph is 2, so A = 2. The vàlues of A for all LC orbits for n < 12 
clearly show that A and d, the distance of the associated self-dual additive 
code over GF(4), are related. LC orbits associated with codes of high distance 
typically have small vàlues for A. ITablc 7 .21 summarises this observation by 
listing the ranges of A observed for all LC orbits associated with codes of given 
lcngths and distances. For instance, [[12, 0, 2]] codes exist with any value of A 
between 4 and 11, while [[12, 0, 5]] and [[12, 0, 6]] codes only exist with A = 4. 

Deflnition 7.3. Let A n be the minimum value of A over all LC orbits of graphs 
on n vcrtices, i.e, 

A n =wL·^\(G). (7.4) 

From lTable 7.2l we observe that A„ = 2 for n from 3 to 6, A n = 3 for n from 
7 to 10, and A n = 4 when n is 11 or 12. 

Proposition 7.4. A n+ i > A n , i.e., A n is monotonically nondecreasing when 
n is increasing. 

Proof. Consider a graph G = (V, E) with n + 1 vertices. Select a vèrtex v and 
let G' be the induced subgraph on the n vertices We generate the LC 

orbit of G' . The LC operations may add or remove edges between G' and v, 
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7.1 Peaks and Independent Sets 



Table 7.3: Vàlues of A n for n < 14 and Bounds on A n for n < 21 



;? 


A„ 


2 


1 


3 


2 


4 


2 


5 


2 


G 


2 


7 


3 


8 


3 


9 


3 


10 


3 


11 


4 


12 


4 


13 


4 


14 


4 


15 


4-5 


1G 


4-5 


17 


4-5 


18 


4-6 


19 


4-6 


20 


4-6 


21 


4-9 



but the presence of v does not affect the LC orbit of G' . The size of the largest 
independent set in the LC orbit of G' is at least A„ . This is also an independent 
set in the LC orbit of G, so A n +i > A n . □ 

Definition 7.5. There is a number r — R(m, n), called a Ramsey number [45| . 
such that it is guaranteed that all simple undirected graphs on at least r vertices 
will have either an independent set of size mora clique of size n. 

Proposition 7.6. If r is the Ramsey number R(k,k + 1), then A„ > k for 
n > r. 

Proof. Consider a graph containing a clique of size m. An LC operation on any 
vèrtex in the clique will produce an independent set of size m — 1. Thus the 
maximum clique in an LC orbit, where the largest independent set has size A, 
can not be larger than A + 1. Since r = R(k, k + 1), it follows that all graphs on 
at least r vertices must have A > k, and therefore that A„ > k for n > r. □ 

For instance, the Ramsey number i?(3, 4) is 9, so by |Proposition 7l6) A„ > 3 
for n > 9, which means that no LC orbit with at least 9 vertices can have A 
smaller than 3. Similarly, iï(4, 5) = 25, so A n > 4 for n > 25. For n from 13 to 
21, we have computed the vàlues of A for some graphs corresponding to self-dual 
additive codes over GF(4) with high distance. This gives upper bounds on the 
value of A„, as shown in ITable 7.31 The bounds on A13 and A14 are tight, since 
A12 = 4 and A, i+ i > A„. The bounds on A„ given by |Proposition 7.6| are very 
loose, since we can see from lTablc 7.31 that A n > 3 for n > 7 and that A„ > 4 
for n > 11. The connection to Ramsey theory is still interesting, and it may be 
possible to improve the bound. 

Remark. For n = 10, there is a unique LC orbit that satisfies, optimally, A = 3, 
PAR/ífTv = 8 and d = 4. One of the graphs in this orbit is the graph complement 
of the "double 5-cycle" graph, shown in |Figure 7.1| 
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7 Peak-to-Average Power Ratio 




Figure 7.1: The "Double 5-Cycle" Graph 



Proposition 7.7 (Parker and Rijmen H3). Given a graph G = (V,E) with a 
maximum independent set A C V , \A\ = a(G). Let s = (—l)^ x \ where f is 
the Boolean function representation of G. Let U = ® fe6/i ®fc£A I^ k \ i- e -, 
the transformation applying H to variables corresponding to vertices k € A and 
I to all other variables. Let S = Us. Then 

max \S m \ 2 = 2 a(G) . (7.5) 

Arratia et al. Q-Q introduced the interlace polynomial q(G, z) of a graph G. 
Aigner and van der Holst later introduced the interlace polynomial Q{G, z). 
Riera and Parker |52j showed that q(G, z) is related to the {/, H} n spectra of 
the quadratic Boolean function corresponding to G, and that Q(G, z) is related 
to the {I, H, N} n spectra. 

Proposition 7.8 (Aigner and van der Holst 1]). The interlace polynomial 
Q{G, z) can be defined recursively as 

Q(G, z) = Q(G\u, z) + P(G u \u, z) + P(((G u ) v ) u \u, z), (7.6) 

where G u denotes the LC operation on vèrtex u of G, and G\u is the graph 
obtained by removing vèrtex u and all edges incident on u from G. 

Proposition 7.9 (Riera and Parker |52j). Let f be a quadratic Boolean function 
and G its associated graph. Then PARjhn of f is equal to 2 deg Q( G ' z \ where 
degQ(G, z) is the degree of the interlace polynomial Q(G,z). 

Aigner and van der Holst 0] proved that the degree of q(G, z) is equal to 
the size of the maximum independent set in the switch-class of G, which is the 
same as the { I, H} n orbit of G. This proof can be extended to show that the 
degree of Q(G,z) equals A, the size of the maximum independent set in the 
{/, H, N} n orbit of G. 

Theorem 7.10. If the maximum independent set over all graphs in the LC 
orbit [G] has size A(G), then all functions corresponding to graphs in the orbit 
will have PAR IHN = 2 A ( G ). 

Proof. Let us for brevity define P(G) = PAR IHN (s), where s = 2~t (-!)/("=), 
and f(x) is the Boolean function representation of G. From |Proposition 7.7| 
it follows that P(G) > 2 X( - G \ Choose K = (V,E) G [G] with a(K) = A(G). 
If |V| = 1 or 2, the theorem is true. We will prové the theorem for n > 2 
by induction on |V|. We will show that P(K) < 2 a ( K \ which is equivalent to 
saying that P(G) < 2 X ( G \ It follows from |Proposition 7.8| and |Proposition 7.9| 
that P{K) = max.{P(K\u), P(K u \u), P(((K u ) v ) u \u)}. Assume, by induction 
hypothesis, that P(K\u) = 2 X(K \ U '> . Therefore, P(K\u) = 2 a( - K \ u ï for some 
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K\u G [K\u]. Note that K\u € [-RT\u] implics i\T e [if]. It must then be true 
that a(K\u) < a(K) < a(K), and it follows that P(K\u) < 2 a( - K \ Similar 
arguments hold for P{K u \u) and P(((K u ) v ) u \u), so P(if) < 2 a( - K ~> . □ 

As an example, the Hexacode has A = 2 and therefore PARjhn = 2 2 = 4. 
The vector containing the highest peak can be found by taking either of the 
two graphs in the LC orbit, since both have independence number A, and then 
by applying the H transformation to all variables corresponding to vertices in 
an independent set of size A and the I transformation to all other variables. 

Corollary 7.11. Any quadratic Boolean function on n or mort variables must 
have PARjhn > 2 A ". 

Definition 7.12. PAR^ is the peak-to-average power ratio with respect to the 
infinite transform set U n , where U consists of matrices of the form 

_ /cos 9 sin 6è** \ 
\sm0 -cos6>e l< 7 ' 

where i 2 = — 1, and 8 and <j> can take any real vàlues. U comprises all 2 x 2 
unitary transforms to within a post-multiplication by a matrix from T>, the set 
of 2 x 2 diagonal and anti-diagonal unitary matrices. (Note that Parker and 
Rijmen Ü3 refer to PAR U as PAR.) 

Theorem 7.13 (Parker and Rijmen |4Cjl. If s corresponds to a bipartíte graph, 
then PARu(s) = PARih(s), where PARjh is the peak-to-average power ratio 
with respect to the transform set {I,H} n . 

It is obvious that {/, H} n C {/, H, N} n C U n , and it foll ows that PAR J g < 
PAR/ífjv < PAR^. We then get the following corollary of ITheorem 7.101 and 
ITheorem 7.131 

Corollary 7.14. If an LC orbit, [G], contains a bipartite graph, then all func- 
tions corresponding to graphs in the orbit will have PARu — 2 A( · G - 1 . 

All LC orbits with a bipartite member have PARjhn = PAR^, but note 
that these orbits will always have PAR^ > 21*1 M , and that the fraction of 
LC orbits which have a bipartite member appears to decrease exponentially as 
the number of vertices increases. In the general case, PARjhn is only a lower 
bound on PAR^. For example, the Hexacode has PARjhn = 4, but a tighter 
lower bound on PARu is 4.486 |4(J. (This bound has later been improved to 
5.103 |Ü.) 

7.2 Constructions for Low PAR 

So far we have only considered the PARjhn of quadratic Boolean functions. For 
cryptographic purposes, we are interested in Boolean functions of degree highcr 
than 2. As shown in lsection 6.31 such functions correspond to hypergraphs and 
non-quadratic quantum codes. ITable 6!ïïl on page 70 gives the value of PARjhn 
for some non-quadratic Boolean functions with high APC distance. Many of 
these functions have the same PARjhn as the best quadratic functions, but no 
non-quadratic function with lower PARjhn than the best quadratic functions 
has yet been found. Exhaustive searching for non-quadratic Boolean functions 
with low PARjhn becomes infeasible for more than a few variables. We there- 
fore propose a construction technique using the best quadratic functions as 
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Table 7.4: Sampled Range of PARihn for Length (n) from 6 to 10 



n 


S amples 


Kange oi rAïxiHN 


6 


50,000 


6.5-25.0 


7 


20,000 


9.0-28.125 


8 


5,000 


12.25-28.125 


9 


2,000 


14.0625-30.25 


10 


1,000 


18.0-34.03 




Figure 7.2: Example of Construction for PARhn < 8 



building blocks [la]. Before we describe our construction we must first state 
what we mean by "low PARihn"- For n = 6 to n = 10 we computed PARihn 
for samples from the space 13^ , to determine the range of PARihn we can 
expect just by guessing. ITable 7.41 summarises these results. If we can con- 
struct Boolean functions with PARihn lower than the sampled minimum, we 
can consider our construction to be somewhat successful. 

Parker and Tellambura 0, 0] proposed a generalisation of the Maiorana- 
McFarland construction for Boolean functions that satisfies a tight upper bound 
on PAR with respect to the {H, N} n transform (and other transform sets), this 
being a form of Golay Complementary Set construction and a generalisation of 
the construction of Rudin and Shapiro and of Davis and Jedwab [T?! ] . 

Construction 7.15. Let p(x) be a Boolean function on n — Y^=o variables, 
where T = {io,íi, . . . is a set of positive integers and x S Z£. Let 

Vj € ^2 > — 3 < L, such that x = yo x yi x • • • x y^—i- Construct p(x) as 
follows. 

L-2 L-1 

pO) = 6 í ( y 3 (vj+i ) + íví ) . ( 7 - 7 ) 

3=0 j=0 

where 6j is a permutation: Z^ 3 — » Z 2 ;í+1 , 7^ is a permutation: Z* J +1 — » Z^ 3 , 
and gj is any Boolean function of tj variables. It has been shown [i^l that the 
function p(x) will have PARífAf < 2* max , where í max is the largest integer in 
T. It is hclpful to visualise this construction graphically, as in |Figure 7.2| In 
this example, the size of the largest partition is 3, so PAR#at < 8, regardless 
of what choices we make for 8j , jj , and gj . 

Observe that if we set L = 2, t = íq = t%, let 9q be the identity permutation, 
and gç, = 0, Construction l7. 15l reduces to the Maiorana-McFarland construction 
over 2t variables. Construction 17.151 can also be viewed as a generalisation of 
the path graph, f(x) = xqXi + x\Xi + • • • + x n -2X n -i, which has optimal PAR 
with respect to {H,N} n . Unfortunately, the path graph is not a particularly 
good construction for low PARih n ■ But as we have seen, graphs corresponding 
to self-dual additive codes over GF(4) with high distance do give us Boolean 
functions with low PARihn- 
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7.2 Constructions for Low PAR 
Construction 7.16. We propose the generalised construction, 

L-l L-l L-l 

= E E ^Aví^àvj) + E asívi), (7-8) 

i=0 j=i+l j=0 

where Tíj is either a permutation: — ► Z^ , or üjj = 0, and <?j is any Boolean 
function on tj variables. 

It is evident that T can be thought of as a "generalised adjacency matrix", 
where the entries, r,-j, are no longer or 1 but, instead, or permutations from 
Z2 to Z 2 J . Construction l7. 15l then becomes a special case where Tíj — except 
for when j = i + 1, i.e., a "generalised adjacency matrix" of the path graph. In 
order to minimise PARjjj n we choose the form of the matrix T according to the 
adjacency matrix of a self-dual additive code over GF(4) with high distance. 
We also choose the "offset" functions, gj, to be Boolean functions correspond- 
ing to self-dual additive codes over GF(4) with high distance. Finally for the 
non-zero T^j entries, we choose selected permutations, preferably nonlinear to 
increase the overall degree. Here are some initial results which demonstrate 
that, using Construction l7.16l we can construct Boolean functions of algebraic 
degree greater than 2 with low PAR/ hn- 

Example 7.17 (n = 8). Use the Hexacode graph / = 01, 02, 03, 04, 05, 12, 
23, 34, 45, 51 as a template. Let to = 3, t\ = t% = Í3 = £4 = Í5 = 1. (See 
|Figure 7~3"1 ) We use the following matrix T. 



r = 



(0 


02,1 


02,1 


02,1 


02,1 


02, 1\ 


3 





3 








3 


4 


4 





4 








5 





5 





5 





6 








G 





6 


V 


7 








7 


) 



Let 30(2/0) = 01, 02, 12 and all other gj any arbitrary afhne functions. Then, 
using Construction I7.1ÜI to construct p(x) we get p(x) = 023, 024, 025, 026, 
027, 01, 02, 12, 13, 14, 15, 16, 17, 34, 37, 45, 56, 67. It can be verified that p(x) 
has PAR IHN = 9.0. 



Example 7.18 (n = 8). Use the Hexacode graph / 
23, 34, 45, 51 as a template. Let ío = 3, tj. = ta = 
|Figurc 7~3"1 ) We use the following matrix T. 



= 01, 02, 03, 04, 05, 12, 
Í3 = Í4 = <5 = 1. (See 



/0 

3 
4 
5 
6 

\< 



02,1 

4 


7 



12,0,1, 
3 

5 





01,02,12,1,2 

4 

6 




01,02,12 


5 

7 



02,12,1,2\ 
3 


6 

J 



Let go(yo) = 01, 12 and all other gj any arbitrary affine functions. Then, using 
Construction [7~T6l to construct p(x) we get p(x) = 015, 016, 023, 025, 026, 027, 
124, 125, 126, 127, 01, 04, 12, 13, 14, 15, 17, 24, 25, 27, 34, 37, 45, 56, 67, where 
p{x) has PAR/hw = 9.0. 
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Figure 7.3: Example of Construction for Low PARihn 




Figure 7.4: Example of Construction for Low PARihn 

Example 7.19 (n — 9). Use the triangle graph / = 01,02, 12 as a template. 
Let to = t\ = t.2 = 3. (See |Figure 7.4| ) Assign the permutations 



— To, 2 


= (12,0,1,2)(01,2)(02,1,2), 


Ti,o 


= (34,5)(35,4,5)(45,3,4,5), 


Tl,2 


= (45,3,4,5)(34,5)(35,4,5), 


1^2,0 


= (68,7,8)(78,6,7,8)(67,8), 


r 2 ,i 


= (78,6,7,8)(67,8)(68,7,8). 



Let 5o (yo) = 01,02,12, gi ( yi ) = 34,35,45, and g 2 (y 2 ) = 67,68,78. Then, 
using Construction 17.161 to construct p(x) we get, p(x) = 0135, 0178, 0245, 
0267, 1234, 1268, 3467, 3568, 4578, 014, 015, 016, 017, 018, 023, 024, 025, 028, 
034, 068, 125, 127, 128, 134, 145, 167, 168, 234, 235, 245, 267, 268, 278, 348, 
357, 358, 378, 456, 457, 458, 468, 478, 567, 568, 578, 05, 07, 08, 13, 14, 17, 23, 
25, 26, 28, 36, 37, 38, 46, 56, 58, 01, 02, 12, 34, 35, 45, 67, 68, 78, where p(x) 
has PAR IHN = 10.25. 

The examples of our construction satisfy a low PARihn ■ Further work should 
ascertain the proper choice of permutations. Finally, there is an even more 
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obvious variation of Construction 17.161 suggested by the graphs of |Figure 4.1[ 
where the functions gj are chosen either to be quadratic cliques or to be furthcr 
"nested" versions of Construction 17.161 

7.3 Quantum Interpretations of Spectral Measures 

A quantum code with good error correcting capability must produce encoded 
states that are highly entangled. The single quantum state corresponding to 
a zero-dimensional quantum code of high distance must also be a highly en- 
tangled state ÜÜ- The distance of self-dual quantum codes, or more generally, 
the APC distance of Boolean functions, may therefore be interpreted as en- 
tanglcment measures of the corresponding quantum states. No entanglement 
measure is known that completely quantihes the degree of entanglement in a 
pure multipartite quantum state of more than 3 qubits, and APC distance is 
also only a partial measure. 

The PARíi of a vector s also gives information about the quantum state 
with probability distribution vector s. We recali from Iscction 2~ïl that the 
vàlues |sí| 2 , where i £ 2*2 n , are the probabilities of observing each of 2 n basis 
states in a particular measurement basis associated with s. The maximum 
value of \sí\ 2 over all i £ gives the probability of the most likely outcome 
of a measurement in this particular measurement basis, and can therefore be 
interpreted as a partial measure of the uncertainty of the quantum state. If 
this value is high, the state has low uncertainty in this measurement basis. A 
local unitary transformation corresponds to a change of measurement basis. 
Local unitary transformations of the vector s are reversible and do not change 
the overall entanglement properties of the corresponding quantum state, but 
the measurement basis is changed, and the magnitudes of the coefficients of 
s, and therefore the uncertainty, may also change. If we can apply any local 
unitary transformation to s, i.e., use any measurement basis, what is the lowest 
uncertainty, i.e., the highest probability of any basis state, we can achieve? 
The answer to this question is simply the value of PAR^(s), as defined in 
IDchnition 7.121 Since PARihn is a lower bound on PAR^, it is also a lower 
bound on the uncertainty of a quantum state, where uncertainty means the 
highest probability of observing any basis state in any measurement basis. 

Definition 7.20. Given an n-qubit quantum state we can write 

R 

M = 5>l&>. (7.9) 

i=l 

where Cj £ C and \4>i), for 1 < i < R, are R of the 2™ basis states in a 
particular measurement basis. Let r be the smallest possible value of R for any 
measurement basis. The Schmidt measure of is then given by 

E s (m = log 2 (r). (7.10) 

The Schmidt measure was defined by Eisert and Briegel and later stud- 
ied in the context of graph states by Hein, Eisert, and Briegel j^. We can 
also dehnc the Schmidt measure in terms of the probability distribution vector 
associated with a quantum state. 

Definition 7.21. Let s be a complex-valued vector of length 2™ corresponding 
to the quantum state Given a local unitary transform S = Us, where 

U £ U n , we define R = \{Si ^ | < i < n}\, i.e., the number of non-zero 
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coefficients of S. Let r be the smallcst possible value of R for any transformation 
U G U n . The Schmidt measure of \tp) is then Es(\ip)) = log 2 (r). 

Proposition 7.22. Let \ipf) be a bipolar quantum state described by the vector 
s = 2-7 (-l) /(a!) ) w/iere / is a quadratic Boolean function. We can then give 
an upper bound on the Schmidt measure of \ipt), 

EsQipf)) <n- log 2 (PAR IHN (s)). (7.11) 

Proof. It can be shown that the coeficients of any {/, H, N} n transform of a 
quadratic Boolean function have only two different magnitudes 52] . It follows 
that in the {/, H, N} n transform containing the highest spectral peak, all co- 
cfficicnts must either be zero or have the same magnitude as the peak, and 
therefore that there must be D , D 2 — rr non-zero cocfficicnts. □ 

Bv ITheorcm 7. lOl (jT. 1 ip can also be expressed in tcrms of A, 

E s (\iP f ))<n-\(G), (7.12) 

where G is the graph corresponding to s and A(G) is the size of the maximum 
independent set over the LC orbit of G. The size of the minimum vèrtex cover 
of a graph G, denoted v{G), is given by v{G) = n — a(G), where a(G) is the 
size of the maximum independent set of G. It was shown by Hein et al. |3Cj 
that 

EsWf)) < HG). (7.13) 

Proposition 7.23. Let \tjjf) be a bipolar quantum state described by the vector 
s = 2-í(-l)^ x ), where f is any Boolean function. The Schmidt measure of 
\ipf) is then lower bounded by 

Es(\i>f)) > n - log 2 (PAR u (s)). (7.14) 

Proof. In this case, the transforms may have more than two different magni- 
tudes. We do therefore not know how many non-zero coefficients the transform 
with the highest peak has, but we know that no transform can have any co- 
cfficicnt with higher magnitude than PARu, and therefore that all transforms 



must have at least 



PAR„0) 



non-zero coefficients. □ 



Corollary 7.24. It follows from \Theorem 7.ï3[ that if s = 2 2 (— l)/( x ) corre- 
sponds to a bipartite graph G, then 

E s (\i> f )) = n - log 2 (PAR u (s)) = n - log 2 (PAR IH (s)). (7.15) 

When we look at non-quadratic Boolean functions, or when we use other 
transform sets than {/, H, N}, the transforms may have more than two different 
magnitudes. The connection between PAR and Schmidt measure in these cases 
is not clear. 

We recali that a Boolean function is called bent if its {H} n transform is 
flat. Riera, Petrides, and Parker 0, have proposed that this criteria can 
be generalised by counting how many of the 6" {/, H, N} n transforms of a 
Boolean function are flat. A high number of flat spectra indicates maximal 
distance to a large subset of generalised affine functions, and a high number of 
maximum uncertainty measurement bases within the complete set of {I, H, N} n 
measurement bases. Other entanglement measures can also be derived from the 
{I, H, N} n spectrum. 
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Definition 7.25. Given a vector s, let a be the sum of the fourth powers of 
all 6™ spectral magnitudes in the {I,H,N} n spectrum, i.e., 

a= Yl l^l 4 ' ( 7 - 16 ) 

Ue{I,H,N} n 

where S = Us. The Clifford mèrit factor (CMF) of s is then given by 

CMF(s) = . (7.17) 

a — o n 

High APC distance, low PARihn, and high CMF are clearly correlated prop- 
erties, and the best self-dual quantum codes optimise all of them. Non-quadratic 
Boolean functions with equally good properties as the best quadratic functions 
have also been found. The CMF is an cntanglcmcnt measure, and it can be 
shown that CMF remains invariant under any local unitary transformation, 
i.e., CMF(s) = CMF(í7s), where U € U n . Since the overall entanglcment of a 
quantum state does not change under local unitary transformations, all entan- 
glement measures should have this property. The Schmidt measure and PAR^ 
are also invariant under local unitary transformations. It may be possible to 
generalise CMF by extending the transform set while increasing the power of 
the spectral magnitudes. This could give an infinite sequence of entanglement 
measures, all invariant under local unitary transformations, which converges 
towards PAR^. 
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In this thesis we have studied zero-dimensional quantum codes and their inter- 
pretations as quantum states, self-dual additive codes over GF(4), graphs, and 
Boolean functions. We have looked at different properties and generalisations 
under each interpretation. For reasons of computational complexity, we have 
restricted our study to self-dual quantum codes of length up to 30. But even 
for codes of such short length, there are many interesting problems. 

Problem 8.1. As seen in ITable 2.11 the best achievable distances for codes of 
length from 23 to 27 are not known. What are the optimal distances for these 
lengths? In particular, does there exist a [[24, 0, 10]] quantum code? 

Many examples have been shown of self-dual quantum codes of high minimum 
distance with highly structured and regular graph representations. In particu- 
lar, we have searched all circulant graph codes with length up to 30 for nested 
regular graphs. The nested regular description does not completely characterise 
the structure of a graph, but we have also shown that nested regular graph rep- 
resentations of strong codes contain long cycles. Initial results further suggest 
that the long cycles should be arranged in such a way that no smaller cycles are 
induced. We have also identified graph representations with minimum regular 
vèrtex degree for many self-dual quantum codes. Graphs with minimum regular 
vèrtex degree have the lowest possible number of edges, and the corresponding 
generator matrices are therefore as sparse as possible. In many applications of 
classical coding theory, sparsity of the generator matrix is a desired property. 

Problem 8.2. Identify other regular graph structures than those listed in 
ITable 4.11 in particular for codes of length 28 and above. 

Problem 8.3. Is it possible to further generalise and extend the description of 
highly regular graphs corresponding to strong self-dual quantum codes? 

Problem 8.4. Devise a construction technique for nested regular graphs, giving 
self-dual quantum codes with a predictable minimum distance. 

Problem 8.5. Find graphs with minimum regular vèrtex degree corresponding 
to self-dual quantum codes of length above 27 and distance higher than 8. Of 
particular interest is the existence of a graph with regular vèrtex degree 11 
corresponding to a [[30,0, 12]] code. 

We investigated all self-dual quantum codes of length up to 30 corresponding 
to graphs with circulant adjacency matrices, and found codes of equally high 
distance to those of Gulliver and Kim [2^ in their more general search of all 
self-dual additive codes over GF(4) with circulant generator matrices. 
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Problem 8.6. How many GF(4)-circulant codes also have circulant graph rep- 
resentations, and are codes with circulant graph representations stronger than 
general codes? 

We have seen that the quadratic residue construction produces codes corre- 
sponding to strongly regular Paley graphs. The largest clique in a Paley graph 
is known to be very small, compared to the number of vertices in the graph |55j. 
Since it can also be shown that all Paley graphs are isomorphic to their com- 
plements, their indcpcndence numbers must be equally low. We have seen that 
graphs corresponding to strong self-dual quantum codes have small independent 
sets over their whole LC orbit, and this implies that the largest independent set 
of a Paley graph remains small when any sequence of local complementations 
is applied. 

Problem 8.7. Give bounds on the size of the largest independent set over the 
LC orbit of a Paley graph. 

Problem 8.8. Can other families of strongly regular graphs, or familics of 
graphs known to have small indcpendence numbers, be used to construct self- 
dual quantum codes of high distance? 

We showed that some self-dual quantum codes, in particular the [[11,0 , 511 
and [[18,0,8]] codes, have no regular graph representation. Glynn et al. [231 ] 
have used finite geometry to construct and characterise the [[18,0,8]] code. 

Problem 8.9. Do strong self-dual quantum codes with no regular graph rep- 
resentation correspond to graphs that are highly structured in some other way, 
and can this structure be generalised? 

We have classified all self-dual additive codes over GF(4) of length up to 12. 
Enumerating all codes of higher length, with a reasonable amount of computa- 
tional resources, is not possible using the algorithms in lsection 5.21 

Problem 8.10. Devise an algorithm for canonising a graph, like |Algorithm 5.2] 
but without requiring that the whole LC orbit of the graph is generated. This 
could give a much faster method for enumerating LC orbits. 

Problem 8.11. Devise an efficient algorithm for determining whether two 
graphs are LC-equivalent, like the one described by Van den Nest et al. [5Í| 
and Bouchet but that also considers equivalence via graph isomorphism. 

We have seen that the APC distance of a Boolean function is equal to the 
distance of the corresponding zero-dimensional quantum code. For quadratic 
Boolean functions, which correspond to self-dual additive codes over GF(4), we 
can use the efficient |Algorithm 3.1| to find the APC distance. Boolean functions 
of higher degree correspond to non-quadratic quantum codes, and we have used 
the much more complex |Algorithm 6.2| to find their distance. We have found 
several non-quadratic Boolean functions, listed in ITable 6.61 with exactly the 
same APC distance and PARihn as the best quadratic functions. 

Problem 8.12. Are there better algorithms for finding the APC distance of a 
non-quadratic Boolean function? For instance, do cúbic Boolean functions cor- 
respond to some generalisation of additive codes over GF(4) where the distance 
can be found efficiently? 

Problem 8.13. Improve |Algorithm 6.3| and classify all orbits in 0\^ n and 02, n 
for n > 5. 
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Problem 8.14. Do there exist non-quadratic Boolean functions with highcr 
APC distance or lower PARihn than the best quadratic functions? 

We havc dcfincd À, the size of the largest independent set over an LC orbit, 
and A n , the minimum value of A over all LC orbits of graphs on n vertices. It 
has also been shown that PARihn = 2 A for quadratic Boolean functions, and 
we have given bounds on A„. The bounds on A„ are also bounds on PARihn 
and PAR^. 

Problem 8.15. Improve the bounds on A„, or find exact vàlues of A ra for 
n > 15. 

Problem 8.16. Can other symmetries of non-quadratic Boolean functions be 
found by adding other matrices to the set {I, H, N}? 

Problem 8.17. Is there an operation, similar to local complementation, that 
generates orbits of equivalent hypergraphs? 

Problem 8.18. Is there a relationship between the maximum independent set 
in the orbit of a hypergraph and the PARjhn of the corresponding Boolean 
function? Maybe we need to consider PAR with respect to a larger transform 
set than {/, H, N} in order to find such a relationship. 

We have seen that Construction l7.15l gives Boolean functions of high degree 
with predictable PAR^jv, and we have proposed the more general Construc- 
tion 17.161 for Boolean functions of high degree with low PAR/jj^. 

Problem 8.19. What is the best choice of permutations in Construction l7. 161 ? 

Problem 8.20. Find bounds on the PAR/ífjv of functions generated by Con- 
struction 17. 161 when specific permutations are used. 

Construction [?~T5l is a generalisation of the path graph, which have optimal 
PAR#7v but high PARihn- It can be shown that complete graphs (cliques) 
have optimal PARjh, but that they also have high PARihn- Functions that 
optimise PARihn should do well for both PAR#at and PARih, and should 
perhaps be some compromise between clique graphs and path graphs. We 
have seen that some of the quadratic Boolean functions with lowest PARih n 
correspond to nested clique graphs, which contain both cliques and long disjoint 
paths. 

Zero-dimensional quantum codes of high distance correspond to highly en- 
tangled quantum states, and also to Boolean functions that satisfy the aperiodic 
propagation criterion of high order or degree. APC is related to several other 
criteria which measure the cryptographic strength of a Boolean function. This 
suggests that a highly entangled quantum state may correspond to a crypto- 
graphically strong Boolean function. We have shown that spectral properties 
of Boolean functions, such as APC distance, PAR^, and PARihn can be used 
to measure the degree of entanglement in a quantum state, as can the Schmidt 
measure and the Clifford Mèrit Factor In this thesis, we have studied 

quantum states with coeíficients from the set { — 1, 1}, represented by the bipo- 
lar truth table of a Boolean function. This is, of course, only a subset of all 
possible quantum states. 

Problem 8.21. Classify spectral measures of quantum states using other trans- 
form sets than {7, H, N} n . 

Problem 8.22. Find efircient techniques for approximating PAR^. 
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8 Conclusions and Open Problems 

Problem 8.23. Study the properties of zero-dimensional quantum codes cor- 
responding to non-bipolar quantum states, for instance quantum states with 
cocfíicients from the sets {0, 1} or { — 1,0, 1}. 
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